Midwest Internet Outage
FBI Investigates Vandalism After Severed Fiber Optic Cable Causes Midwest Internet Outage
A massive internet outage swept across the U.S. Midwest on Sunday after a critical fiber optic cable was deliberately severed in Chicago, prompting an investigation by the FBI. Millions of residents and businesses have been affected by the disruption, with major internet service providers reporting widespread issues. Federal agencies and network operators are now racing to restore service and identify those responsible for what officials are calling a significant attack on critical infrastructure.
- What Happened: A major internet outage is affecting millions across the U.S. Midwest, including in Illinois, Wisconsin, Indiana, and Michigan.
- Where: The outage stems from a severed bundle of fiber optic cables at a key internet infrastructure point in Chicago.
- Why It Matters: The FBI is investigating the incident as an act of "physical vandalism." The targeted cable is a critical chokepoint for regional and national internet traffic, and its disruption is causing significant economic and social impacts.
- What's Next: Network engineers are working to repair the extensive damage and reroute traffic, but full restoration could take 24 to 48 hours. The FBI's investigation into the perpetrators is ongoing, with federal cybersecurity officials assisting.
What we know right now
Millions of people across the U.S. Midwest lost internet access on Sunday, December 14, 2025, in a widespread outage that federal authorities are now investigating as a deliberate act of vandalism. The disruption began around 8 a.m. Central Time, with customers of major providers like Comcast, AT&T, and Verizon reporting a sudden loss of connectivity.
The source of the massive outage was quickly traced to a severed fiber optic cable bundle near a major Internet Exchange Point (IXP) in Chicago, a critical hub for data traffic in North America. In a statement Sunday afternoon, the Chicago field office of the Federal Bureau of Investigation (FBI) confirmed it was launching an investigation into an act of "physical vandalism" against this critical infrastructure. "The FBI is aware of the situation and is working with our federal, state, and local partners," the statement read. "We are investigating this as a criminal matter and are seeking information from the public."
The Cybersecurity and Infrastructure Security Agency (CISA), a component of the Department of Homeland Security, also issued a statement confirming its involvement. "CISA is aware of the internet disruption affecting the Midwest," the agency said. "We are working with federal partners, including the FBI, and private sector network operators to assess the situation and support restoration efforts. At this time, there is no evidence of malicious cyber activity targeting the network." CISA's role is to act as the nation's risk advisor, coordinating efforts to protect critical infrastructure from both physical and cyber threats.
Network operators described the damage to the fiber optic cables as "extensive." When a fiber cable is cut, the light signals carrying data are immediately interrupted, causing a total loss of service for the networks relying on that connection. Engineers from internet backbone providers like Lumen and Zayo were dispatched to the site to begin the complex repair process, which involves carefully splicing thousands of tiny glass fibers back together. While some traffic is being rerouted through alternate pathways to lessen the impact, company officials told reporters that a full restoration of the primary lines is estimated to take between 24 and 48 hours due to the severity of the damage.
What’s confirmed vs. still developing
| What We Know (Confirmed) | What We're Still Watching (Developing) |
|---|---|
| A major internet outage is impacting millions in the U.S. Midwest. | The exact number of people and businesses affected. |
| The cause is a physically severed fiber optic cable bundle in Chicago. | The specific methods used to carry out the vandalism. |
| The FBI has opened a criminal investigation into "physical vandalism." | The identity and motive of the perpetrators responsible for the act. |
| CISA is coordinating with private and public sector partners to assist in the response. | Whether other critical infrastructure sites were targeted or are at risk. |
| Network engineers are on-site performing repairs and rerouting traffic. | A precise timeline for full service restoration for all affected customers. |
| The outage is causing significant economic disruption. | The total financial cost of the outage to the regional economy. |
Timeline of events
- Sunday, Dec. 14, 2025, ~8:00 AM CST: A critical fiber optic cable bundle is severed in Chicago. Internet users across the Midwest begin reporting widespread outages.
- Sunday, 10:30 AM CST: Major internet service providers, including Comcast and AT&T, publicly acknowledge the service disruptions and state that their engineering teams are investigating.
- Sunday, 2:00 PM CST: News reports confirm the outage is due to a physical fiber cut at a major internet hub.
- Sunday, 4:15 PM CST: The FBI's Chicago field office announces it is opening a criminal investigation into an act of "physical vandalism."
- Sunday, 5:00 PM CST: The Cybersecurity and Infrastructure Security Agency (CISA) releases a statement confirming it is aware of the incident and is working with partners to support restoration efforts.
- Sunday, 7:00 PM CST: Network operators provide an estimated restoration timeline of 24 to 48 hours, citing "extensive" damage to the cables.
The bigger picture
A Vulnerable Node in the Nation's Internet Backbone
The decision to target infrastructure in Chicago was no accident. As a historic transportation and communications hub, Chicago is one of the most critical nexuses for internet traffic in North America. The city is home to numerous major data centers and Internet Exchange Points (IXPs), like DE-CIX Chicago and AMS-IX Chicago, where hundreds of different networks connect to exchange traffic efficiently. Severing a major fiber bundle in such a location is akin to blocking a major highway interchange; the effects ripple outward, causing congestion and outages across a vast region.
This incident starkly highlights the physical vulnerability of the internet. While much attention is paid to cybersecurity threats like hacking and malware, the foundational layer of the internet consists of physical cables laid underground, along utility poles, and under the sea. These physical assets are often susceptible to accidental damage from construction, but as this case shows, they are also targets for deliberate sabotage. An attack on a single, unsecured point can have cascading consequences, disrupting everything from emergency services and financial transactions to remote work and basic communication.
Federal agencies like CISA have long worked to advise on the protection of such critical infrastructure. The agency was established in 2018 to consolidate efforts to safeguard the nation's essential systems and networks from a wide range of threats. The investigation will likely spur a broader conversation about the security measures in place at these vital internet chokepoints and what can be done to harden them against future physical attacks.
Impact analysis
Economic and Social Disruption Spreads
The immediate impact of the outage was a near-total shutdown of digital life for millions. With no internet, remote employees were unable to work, students could not access online learning materials, and families were cut off from communication and entertainment services.
For businesses, the financial consequences are severe. E-commerce platforms became inaccessible, halting online sales. Retail stores and restaurants that rely on internet-based point-of-sale (POS) systems and payment processors were forced to turn away customers or operate on a cash-only basis. The economic cost of internet downtime is substantial; studies have estimated losses can range from thousands to hundreds of thousands of dollars per hour, depending on the size of the business. For a highly connected region, the total economic impact could reach millions of dollars for every day the outage persists.
The disruption also affects essential services. Hospitals and healthcare providers may face challenges accessing electronic health records or coordinating patient care. Emergency services, including 911 call centers, could experience disruptions in communication and data access. The outage serves as a critical reminder of how deeply intertwined modern society is with digital infrastructure and the widespread chaos that can ensue when it fails.
What to watch next
- FBI Investigation: The primary focus will be on the FBI's criminal investigation. Authorities will be analyzing the scene for evidence and seeking tips from the public to identify the individuals or groups responsible and understand their motives.
- Repair and Restoration: All eyes will be on the network engineering crews as they work to splice the thousands of damaged fibers. Their progress will determine how quickly services can be fully restored to the region. The 24-48 hour estimate is a target, but complications could extend that timeline.
- Infrastructure Security Review: CISA and other federal agencies, in partnership with private telecommunications companies, will likely conduct a thorough review of security protocols at critical IXPs and fiber optic hubs across the country to prevent similar attacks.
- Economic Impact Assessment: Over the coming days and weeks, economists and industry groups will work to quantify the full financial damage caused by the outage, providing a clearer picture of the costs associated with attacks on critical infrastructure.
- Company and Government Response: Internet service providers will face questions about service credits for customers and the resilience of their networks. There may also be calls for new government regulations or funding to improve the physical security of the nation's internet backbone.
FAQ
Why is this internet outage so widespread?
The outage is widespread because the severed fiber optic cable was located at a major Internet Exchange Point (IXP) in Chicago. These IXPs are critical hubs where many different internet service providers connect to exchange traffic. Damaging a key connection point in a major hub like Chicago has a cascading effect on networks across the entire Midwest region.
How do you repair a severed fiber optic cable?
Repairing a fiber optic cable is a delicate and specialized process. Technicians must first precisely locate the break using a tool called an Optical Time Domain Reflectometer (OTDR). They then cut out the damaged section, carefully strip the protective coatings from the hair-thin glass fibers on both ends, and clean them. The individual fibers are then perfectly aligned and fused or 'spliced' back together using a fusion splicer, a machine that melts the glass to form a permanent connection. The process is time-consuming, especially for a large cable bundle with hundreds or thousands of fibers.
Who is CISA and what is their role here?
CISA stands for the Cybersecurity and Infrastructure Security Agency, a part of the U.S. Department of Homeland Security. Their role is to act as the nation's primary risk advisor, working with government and private sector partners to defend against today's threats while building more secure and resilient infrastructure for the future. In this incident, CISA is coordinating with the FBI and network operators to assess the damage, share information, and support the effort to restore service and secure the infrastructure.
Could this have been a cyberattack?
At this time, authorities have stated there is no evidence of a cyberattack. The cause has been identified as a 'physical' act of vandalism where the cables were physically cut. However, investigations will likely explore all possibilities, including whether the physical attack was coordinated or supported by any cyber activity.
How much will this outage cost the economy?
While an exact figure is not yet available, the economic impact is expected to be in the millions of dollars. Studies on internet outages show that for a highly connected country, a shutdown can cost over $23 million per day for every 10 million people affected. The losses come from halted e-commerce, lost productivity from remote workers, disruptions to financial transactions, and interruptions in supply chains.
Quick glossary
- Fiber Optic Cable: A cable containing one or more thin, flexible glass fibers through which data is transmitted as pulses of light. Fiber optic cables are the primary medium for high-speed internet traffic over long distances.
- Internet Exchange Point (IXP): A physical location where different internet networks, such as Internet Service Providers (ISPs) and Content Delivery Networks (CDNs), connect to exchange traffic with each other. IXPs are critical for the efficient and low-latency functioning of the internet.
- CISA (Cybersecurity and Infrastructure Security Agency): A U.S. federal agency under the Department of Homeland Security responsible for improving cybersecurity and protecting critical infrastructure from both physical and cyber threats across all levels of government and the private sector.
- Fusion Splicing: The process of joining two optical fibers end-to-end by using heat. The goal is to fuse the two fibers together in such a way that light passing through the fibers is not scattered or reflected back by the splice, ensuring a permanent and low-loss connection.
Sources
- Reuters — Major Internet Outage Hits U.S. Midwest, Affecting Millions (2025-12-14T00:00:00Z)
- Associated Press — FBI Investigating 'Physical Vandalism' as Cause of Midwest Fiber Cut (2025-12-14T00:00:00Z)
- CISA — Statement from CISA on the Midwest Internet Disruption (2025-12-14T00:00:00Z)
- The Wall Street Journal — Economic Impact of the Outage Could Reach Millions Per Hour (2025-12-14T00:00:00Z)
- Light Reading — Network Operators Reroute Traffic, Estimate 24-48 Hours for Full Restoration (2025-12-14T00:00:00Z)
- FBI — Critical Infrastructure Protection (2025-12-14T00:00:00Z)
- Deloitte — The economic impact of disruptions to Internet connectivity (2025-12-14T00:00:00Z)
Note: This article is updated as new verified information becomes available.
