AT&T restored wireless service nationwide Thursday after a major network failure left tens of thousands of customers reporting outages and disrupted access to 911 in multiple communities. The interruption began before dawn, spread across major metropolitan areas and briefly affected FirstNet, the AT&T-operated network used by public-safety agencies. By late afternoon, AT&T said service had been restored and its initial review pointed to an internal technical process rather than a cyberattack.

At the peak of the disruption, outage tracker reports exceeded 70,000, according to contemporaneous coverage from the Associated Press. The scale of the incident was magnified by AT&T’s position as the largest U.S. wireless carrier, serving more than 240 million subscribers across consumer and business accounts.

A network failure becomes a public-safety event

The outage was more than a consumer inconvenience. Emergency agencies in several cities warned that some AT&T customers were unable to reach 911 from their mobile phones. The Guardian reported alerts from the San Francisco Fire Department and other public-safety agencies advising affected customers to use landlines, Wi-Fi calling or another carrier where possible.

FirstNet, the dedicated nationwide broadband network for first responders that AT&T operates under a federal contract, was also affected before being restored. That raised immediate questions in Washington about resilience, redundancy and the procedures used when carriers make changes to large production networks.

The White House said federal agencies were in contact with AT&T. National Security Council spokesman John Kirby said the FBI and Department of Homeland Security were examining the disruption while the Federal Communications Commission was also engaged, according to Reuters. At that stage, officials said they had no evidence that malicious cyber activity caused the outage.

AT&T points to an incorrect internal process

Later Thursday, AT&T said its initial review indicated that the failure occurred during network expansion. The company described the cause as the “application and execution of an incorrect process” and specifically said it did not believe the outage resulted from a cyberattack. The Associated Press reported that AT&T’s network had returned to normal operations after hours of disruption.

The statement did not provide a detailed technical postmortem. That leaves important engineering questions unresolved: what production control failed, why the change propagated so broadly, what automated safeguards were present, and why the event affected enough of the network to create emergency-communications concerns across multiple states.

Contemporaneous reporting by the Washington Post said the company attributed the incident to a technical error made as the network was being expanded. That explanation shifted the focus away from external attack and toward change-management controls inside one of the country’s most critical communications systems.

Other carriers say their networks remained operational

Early outage dashboards also showed elevated reports involving Verizon and T-Mobile, creating initial uncertainty over whether the problem was a broader intercarrier failure. Both companies said their own networks were operating normally and that some customers were having trouble reaching people on AT&T because the destination network was unavailable.

That distinction is significant because cellular networks depend on complex interconnection arrangements. A large failure at one carrier can appear to customers of other carriers as a broader outage when calls or messages terminate on the affected network. Ars Technica noted that the early multi-carrier appearance increasingly looked like a knock-on effect of AT&T’s outage rather than simultaneous nationwide failures at several operators.

AT&T encouraged customers to use Wi-Fi calling during restoration. For many users, however, that workaround depended on access to fixed broadband and compatible equipment. The outage therefore highlighted the extent to which mobile service has become a primary communications layer rather than a secondary convenience.

Resilience questions move to regulators

The FCC’s involvement guarantees that the incident will receive scrutiny beyond AT&T’s internal review. Large communications outages can trigger reporting obligations, particularly when they affect emergency services. The central regulatory questions will include the duration and geography of the disruption, the number of customers and public-safety systems affected, and whether existing reliability practices were followed.

The outage also arrives at a moment when mobile networks are carrying more functions that once depended on separate infrastructure: voice service, authentication, financial transactions, navigation, enterprise access and emergency communications. The consequences of a configuration or process failure therefore expand as the network’s role expands.

AT&T’s immediate restoration limited the duration of the crisis, but the event demonstrated how a single operational mistake can propagate into a nationwide communications problem. As federal agencies review the incident, the most consequential issue is no longer whether service returned Thursday. It is whether the procedures governing changes to a national carrier’s production network are sufficiently designed to prevent one flawed process from creating another outage of similar scale.