The 20 Most Dangerous Corporate Single Points of Failure

Microsoft ranks first because its outage would remove several deeply interlocked layers of modern work at once: Windows endpoints, Microsoft 365 collaboration, Azure infrastructure, and enterprise identity services. Within 72 hours, organizations that rely on its cloud and authentication stack would face outages far beyond lost email or documents; access to applications, servers, and operational systems could fail even where physical equipment remains intact. By 30 days, cloud migrations and identity rebuilds would still be bottlenecked by application compatibility, data movement, and the sheer scarcity of ready replacement capacity. The key danger is the hidden coupling between operating systems, identity, productivity, and cloud services, though organizations with deliberately independent infrastructure would fare much better.

Amazon’s ranking rests primarily on AWS, whose failure would strand a vast and often invisible population of websites, applications, databases, and enterprise services across sectors. Its retail marketplace and fulfillment network would add a large supply-chain shock, especially for third-party sellers and customers accustomed to rapid replenishment. The first 72 hours would bring widespread digital outages and fulfillment stoppages; after a month, the hardest-hit cloud customers would still be rebuilding or migrating systems that were never designed for a fast exit. Amazon’s consumer retail business is partly replaceable, but AWS capacity, technical lock-in, and the added logistics shock make the overall loss exceptionally hard to absorb.

Visa is a core transaction rail, so its disappearance would immediately turn routine commerce into a cash, bank-transfer, and workaround problem at enormous scale. Merchants would lose a major means of accepting payment, consumers would find cards unusable where Visa is the rail, and cross-border transactions would become especially difficult. Other networks, cash, and account-to-account payments provide meaningful fallback, which is the main reason this is not a total financial-system failure. But those alternatives cannot instantly absorb the volume, merchant integration, and habitual reliance that Visa supports, leaving a severe 72-hour shock that would remain economically disruptive throughout the month.

Alphabet combines a broad cloud and communications footprint with foundational consumer and business services: Google Cloud, Workspace, Gmail, search, Maps, Android-linked services, advertising, and online identity tools. The loss would impair information access, business communications, mobile-service ecosystems, and many organizations whose websites and applications sit behind Google infrastructure. The strongest disagreement is over substitutability: search, email, maps, and advertising have alternatives, and much of Android can continue functioning without every Google service. Even so, the scale and interconnection of its cloud, authentication, communications, and mobile ecosystem would make the first days chaotic and the month-long recovery costly.

JPMorgan Chase is dangerous because it is embedded in wholesale payments, custody, corporate treasury, clearing, lending, and liquidity management—not merely because it is a large retail bank. Its sudden absence could interrupt corporate cash movement and settlement, strain counterparties, and create acute uncertainty around funding and market operations within days. A month-long outage would force difficult rerouting of clients and volumes through other institutions already handling their own workloads. The important restraint is that financial systems have regulatory tools, central-bank support, and other major banks; those backstops reduce the odds of outright collapse but do not make a rapid substitution painless.

McKesson’s importance comes from pharmaceutical distribution, a low-visibility function with little room for prolonged interruption. Pharmacies, hospitals, and specialty-care providers depend on frequent replenishment, and inventories of many medicines are too thin or too specialized to bridge a sudden 30-day halt. Shortages would begin within days, while competitors would struggle to reroute manufacturer supply, onboard customers, and add warehouse and delivery capacity quickly enough. Some volume could move through the other major distributors, but that partial redundancy is exactly the constraint: it exists, yet is unlikely to absorb McKesson’s load without painful gaps in care.

UnitedHealth Group ranks highly because Optum links insurance administration, pharmacy benefits, claims processing, provider payments, healthcare data, and care-delivery operations. An outage would quickly interfere with whether providers can verify coverage, obtain authorizations, fill prescriptions, submit claims, and receive payment—problems that can become care-access problems rather than mere paperwork. Over 30 days, providers and patients would face growing financial and administrative strain, particularly where workflows are tightly integrated with Optum services. Other insurers and administrators exist, but switching plans, payment arrangements, and healthcare transaction systems at emergency speed is difficult.

Cencora is a major pharmaceutical wholesaler whose disappearance would rapidly expose how dependent hospitals, pharmacies, and specialty-treatment providers are on continuous logistics. The immediate threat is not that drug manufacturing ceases, but that medicines already in the supply chain stop reaching the places that dispense them. Specialty drugs and tightly managed products are particularly difficult to replace quickly, while provider inventories can be exhausted in days. Competitors could absorb some demand over time, but limited spare distribution capacity and complex supplier arrangements would make the first month a serious healthcare supply crisis.

Bank of America’s loss would disrupt a huge base of consumer deposits, commercial banking, corporate treasury, payroll-related activity, lending, and market-facing financial services. Businesses dependent on its accounts and cash-management systems could face immediate trouble paying workers and suppliers, while customers would lose practical access to routine banking functions. The month-long effect could include tighter credit and wider liquidity stress as clients attempt to move relationships at scale. This placement carries real disagreement because banking is more redundant than a single proprietary network: other banks, deposit protections, and official intervention offer important buffers, even if they cannot instantly recreate every relationship and workflow.

AT&T’s outage would remove major wireless, wireline, and enterprise connectivity across a national footprint, with especially serious consequences for public-safety and first-responder communications tied to FirstNet. In the first 72 hours, disconnected businesses, households, field workers, and government users would face an immediate communications shock, while competing networks would absorb only part of the displaced traffic. A full month would expose the hard physical reality of telecom substitution: customers can change carriers eventually, but rival towers, spectrum, backhaul, and fixed-line connections cannot be conjured overnight. Its main limitation relative to the top ranks is meaningful redundancy from other carriers and networks, even though that redundancy has sharp capacity limits.

CVS Health combines a vast pharmacy footprint with Caremark pharmacy-benefit operations and Aetna insurance, making it a major point of failure for prescription access and healthcare administration. Pharmacies closing would be the visible shock, but disrupted benefit verification, claims, and drug-payment workflows could be just as consequential for patients and providers. The impact would worsen over a month as refills, chronic medications, and local care access become harder to manage. Retail pharmacies and competing benefit managers offer partial alternatives, which restrains the ranking, but they may not have the capacity or contractual readiness to absorb displaced patients quickly.

Cardinal Health is another critical pharmaceutical distribution node, with added importance in the flow of medical products to hospitals and other care settings. Its sudden disappearance would leave pharmacies and providers scrambling for drugs and supplies that are normally replenished through routine, high-frequency deliveries. The damage would be felt quickly because many clinical operations hold limited buffers, and replacement distributors cannot instantly recreate routes, contracts, warehouse capacity, and product allocations. The presence of other large wholesalers provides some redundancy, but it is likely to be strained rather than seamlessly available.

Duke Energy would cause an immediate and severe regional power crisis because electricity cannot be stockpiled by most customers or replaced locally at utility scale. Hospitals, water systems, communications, industrial facilities, data centers, transportation, and households within its service territories would confront rapidly escalating safety and operational problems as backup power is exhausted. A 30-day absence would be devastating across those regions, with little practical short-term substitute for grid operation and local generation. Its lower placement than global infrastructure firms reflects geographic bounds: the consequences are extreme but concentrated in its utility footprint rather than cascading worldwide.

Verizon’s loss would create a large communications outage across wireless, wireline, fiber, enterprise, and government connections. Businesses and emergency services would face immediate operational friction, and rival carriers could not instantly provide equivalent coverage, device support, backhaul, and broadband capacity for displaced users. The effects would compound over a month as organizations try to reconfigure connectivity and as overloaded alternatives absorb traffic. It ranks below AT&T largely because the sector has meaningful carrier redundancy, though that redundancy is uneven and far from sufficient for a clean emergency handoff.

Walmart’s outage would matter because it is a major food, household-goods, pharmacy, and logistics channel, particularly in communities with few nearby high-volume alternatives. Within days, grocery demand would flood competitors, local shelves could empty, and pharmacy access could become a real health issue rather than a retail inconvenience. The disruption would remain serious for a month because replacing store-level capacity and distribution throughput is harder than simply redirecting customers online. Still, food retail is more substitutable than proprietary infrastructure: other grocers, wholesalers, and public responses can partially compensate, which limits the risk of a total food-system failure.

Cargill’s outage would cut through a largely invisible but essential layer of the food system: commodity trading, grain handling, animal feed, processing, ingredients, and the logistics that connect farms to food manufacturers and export markets. Within days, customers dependent on its plants, terminals, and supply arrangements would face difficult rerouting; over a month, feed shortages and ingredient gaps could constrain livestock production and food processing well beyond Cargill-branded products. Its worldwide footprint and the specialized, seasonal nature of agricultural flows make replacement at comparable scale slow, especially at ports and processing bottlenecks. The main limitation is that it operates in commodity markets with other large traders and processors, so this is not a single-company global food collapse; it is a severe, uneven food-supply shock with the greatest consequences where buffers and alternative routes are thin.

Berkshire Hathaway ranks highly because the parent-level outage removes several critical operating networks at once, most notably BNSF freight rail, utility operations, and major insurance and reinsurance capacity. Lost rail service would quickly disrupt bulk commodities and industrial inputs, while utility outages would have direct regional consequences and a halt in insurance operations would complicate claims, underwriting, and risk transfer during an already disruptive month. The danger is therefore an aggregated, cross-sector shock rather than dependence on its corporate brand or investment portfolio. The important caveat is Berkshire’s decentralized structure and the patchwork geography of its holdings: impacts would be severe in particular rail, utility, and insurance markets, but many individual functions have alternatives or can be partly backstopped, making the national and global cascade less uniform than the score’s high end implies.

UPS is a major backbone for parcel, express, business-to-business, medical, and replacement-parts logistics, so an unannounced month-long halt would produce immediate delivery bottlenecks and a rapidly compounding backlog. Hospitals, pharmacies, manufacturers, repair operations, and smaller merchants are more exposed than consumers waiting on discretionary e-commerce purchases, because many rely on tightly timed shipments and lack their own distribution networks. Rival carriers, postal systems, and regional couriers could take some traffic, but they could not rapidly replicate UPS’s integrated ground-and-air capacity, hubs, routing, and international reach. The key restraint is that parcel shipping is not a monopoly: substitution and prioritization would preserve some essential flows, so the outcome is severe supply-chain strain rather than a complete failure of transport or commerce.

Union Pacific’s disappearance would remove a crucial western U.S. freight-rail network for grain, chemicals, coal, industrial materials, and other high-volume cargoes that cannot readily move by truck. In the first 72 hours, shippers would face stranded railcars, broken interchange patterns, and shortages at facilities built around rail delivery; by 30 days, depleted inventories would interrupt industrial production, agriculture, energy-related supply chains, and export flows. Its route geography and terminal capacity make rerouting especially difficult, while highways and trucking fleets cannot absorb comparable bulk volumes without major congestion and cost. Other railroads, alternate routes, ports, and some modal shifts provide partial relief, however, so the disruption is primarily a profound regional and national logistics shock rather than an all-purpose global transport failure.

Exxon Mobil’s loss would take substantial oil and gas production, refining, fuel distribution, and petrochemical feedstocks out of service, pressuring transport, industry, and chemical supply chains. The most acute effects would be regional refinery and product-market imbalances: fuel inventories could cushion the first days, but a full month would tighten supplies of gasoline, diesel, jet fuel, lubricants, and industrial inputs in affected markets. Because energy permeates nearly every sector, the fallout would extend well beyond Exxon’s direct customers through higher costs, constrained transport, and manufacturing interruptions. The principal drawback is fungibility: global oil markets, inventories, strategic reserves, and other producers and refiners offer meaningful—if costly and incomplete—substitution, making price spikes and localized shortages more likely than a worldwide energy-system collapse.