Provider concentration or outage

Many users depend on one model or AI provider, and its failure or change hits them all at once.

NIST AI 600-1 · Value Chain and Component IntegrationFCA Mills Review (2026)MAS AI risk management guidelines (2026)EU DORA Art. 28

2incidents (primary) · 0 more as secondary

0read for controls · 2 not yet

0fixes reported

0repeats after a fix

Incidents per week

No rise: 0 in the week of 26 Oct 2026, against an average of 0 over the 4 weeks before.

Developers

Anthropic · 1

Google · 1

Where the chain broke

Part of the system	Incidents where the control was not effective or did not exist	Incidents where the control was effective	Incidents where sources don't mention the control	Incidents not yet checked for controls
L1 Model Model provider				2
L2 Harness Agent framework vendor				2
L3 Application Deployer				2
L4 Infrastructure / target Organisation hit				2

Controls for this risk, by layer

Control	Incidents where the control was not effective or did not exist	Incidents where the control was effective	Incidents where sources don't mention the control	Most common reason it was not effective
AI incident response plan L3 Application
AI bill of materials L3 Application
Third-party AI assessment and exit plan L3 Application
Fallback when a provider fails L3 Application

4 of 4 controls for this risk not yet recorded as effective.

Fixes reported and what followed

No remediation reported for incidents of this risk.

Incidents

EffectiveNot effectiveNot effective (bypassed)Did not existNot stated in sourcesNot yet checkedAttacker's ownOrder: model · harness · application · target

Date	Incident	Risk	Where it failed	Controls mentioned in sources
2026-07-29	Claude global outage causes elevated errors and latency across all models Anthropic	Provider concentration or outage		Not yet checked
2026-06-11	Google Gemini global outage exceeds seven hours Google	Provider concentration or outage		Not yet checked