Galang Taruna
Millions of Orange and Sosh subscribers across France experienced a significant disruption to mobile services, including calls, SMS, and mobile internet, for nearly ten hours on Wednesday, October 26, 2026. The widespread outage, which began around 11:20 AM and progressively saw services restored by approximately 9:26 PM, has been attributed by the operator to an "equipment failure" within its mobile core network. However, multiple reports from industry experts and technology news outlets, notably Numerama, suggest a more specific and complex cause: a failed migration attempt to Orange’s new 5G Standalone (5G SA) core network. While services are largely back online, the current solution is understood to be provisional, raising questions about the network’s stability and the timeline for a definitive resolution. This incident marks the third and longest national mobile network disruption for Orange in 2026, prompting concerns about the resilience of its infrastructure.
A Day of Digital Paralysis: The Chronology of the Outage
The digital silence descended abruptly on Wednesday morning. Reports of service interruptions for Orange and Sosh customers began to flood social media platforms and outage tracking websites shortly after 11:20 AM. Users across various regions of France reported being unable to initiate or receive calls, send text messages, or access mobile data, effectively cutting off essential communication channels for a significant portion of the population.
In the initial hours of the crisis, Orange maintained a cautious official stance, acknowledging a "national incident" affecting mobile services but offering little detail regarding its nature or scope. This lack of specific information fueled speculation and frustration among affected customers and businesses. As the afternoon wore on, the silence from the operator continued, while the scale of the disruption became increasingly apparent.
By mid-afternoon, a clearer picture began to emerge from independent sources. Clément Domingo, a cybersecurity researcher known by his pseudonym SaxX, published a post on X (formerly Twitter) around 12:55 PM. Citing an internal source, Domingo posited that the outage was likely not a cyberattack but rather an issue stemming from "lines transferred" to a new core network that were "a priori HS" (out of service). This initial, unverified testimony gained significant traction and was later corroborated by investigations from tech news outlets like Numerama. These reports pointed to a specific technical maneuver: an attempted migration of subscriber lines to Orange’s nascent 5G SA core network.
As evening approached, with millions still without service, Orange issued an advisory around 8:00 PM, recommending customers to switch to Wi-Fi networks for internet access, messaging, and calls, a clear indication that the mobile network issues persisted. Finally, at 9:26 PM, a message from Orange France on X announced that "calls, SMS and mobile services are working again for all our customers, individuals and businesses." While this brought relief, the announcement also implicitly confirmed the unprecedented duration of the outage.
The Suspected Technical Breakdown: A Failed 5G SA Migration
At the heart of the suspected problem lies the complex evolution of telecommunications networks, specifically the transition to 5G Standalone (5G SA). To understand the nature of the outage, it’s crucial to differentiate between the existing 5G Non-Standalone (5G NSA) and the newer, fully independent 5G SA architecture. 5G NSA, often referred to as "classic" 5G, still relies on the foundational core network of 4G for critical functions like call management and authentication. In contrast, 5G SA operates on an entirely new, dedicated core network, designed to unlock the full potential of 5G, including ultra-low latency, massive connectivity, and network slicing. Orange markets its 5G SA services under the "5G+" brand, highlighting its advanced capabilities.
According to information gathered by Numerama, Orange had reportedly initiated a delicate maintenance operation on Wednesday morning, aiming to transfer a segment of its subscriber base to this new 5G SA core network. This migration was intended to leverage the "100% independent" architecture that Orange has been progressively deploying since its public launch in March 2025. However, the maneuver reportedly failed catastrophically. The lines undergoing migration became trapped between the two infrastructures, unable to authenticate properly on either the older 4G/5G NSA core or the new 5G SA core. This authentication limbo effectively severed their connection to the mobile network, leading to the widespread paralysis.
Orange’s official communication on the matter has remained guarded. In its evening statement, the operator only referred to "a failure of an equipment at the level of our mobile core network," carefully avoiding any mention of 5G or a migration attempt. This contrasts sharply with the detailed accounts from cybersecurity researchers and technology journalists, who have consistently pointed to the 5G SA migration as the probable culprit. The complexity of modern network infrastructure often necessitates partnerships for troubleshooting, and it has been reported that Orange identified the problem’s origin with the assistance of the telecommunications equipment vendor Nokia. This collaboration underscores the intricate nature of the issue and the specialized expertise required for its diagnosis.
Beyond the Core: Why the Outage Was So Widespread
The initial theory of a failed migration to the new 5G SA core presents a puzzling aspect: if only the lines actively being transferred were affected, why did the outage impact a far broader spectrum of services, including 4G, 5G NSA, enterprise lines, and even roaming connections? In theory, customers still relying on the older, established 4G/5G NSA core should have remained operational.
To resolve this paradox, one must consider the critical role of the "core network" itself. This central nervous system of any mobile operator acts as the command center, authenticating every subscriber’s SIM card against base stations, routing calls, managing SMS traffic, and granting access to the internet. While Orange now operates two distinct core infrastructures—the historical one for 4G and 5G NSA, and the new, independent one for 5G SA—it’s plausible that the incident either escalated beyond the new core or impacted a shared technical component vital to both architectures.
One hypothesis suggests that critical shared elements, such as subscriber identification databases (like the Home Location Register or Home Subscriber Server), which are fundamental for authenticating users regardless of the network generation they use, might have been compromised or overloaded. A failure in such a shared "building block" could trigger a cascading effect, incapacitating services across all network generations that rely on it. Another possibility is that the initial failure within the 5G SA migration triggered a "signaling storm"—a massive surge of reconnection attempts and authentication requests—that overwhelmed other parts of the core network, even those not directly involved in the migration.
A revealing detail from the outage was the resilience of the 3G network. For some users, manually locking their smartphones to the 3G network allowed them to regain a slow but functional connection for calls and basic internet. This anomaly provides strong evidence that the 3G infrastructure operates on older, entirely isolated equipment, confirming its independence from the affected 4G and 5G core networks. However, this workaround was not universally available, as many modern smartphones, including iPhones and numerous Android devices, do not offer the option to manually select 3G-only connectivity, leaving a significant portion of users completely cut off.
The Restoration: A Provisional Fix and Phased Approach
The return of services to Orange and Sosh subscribers on Wednesday evening, while welcome, does not signify a complete resolution of the underlying issue. Reports indicate that the network was brought back online through a "provisional solution," implying a temporary bypass, a partial rollback, or a patch rather than a definitive fix for the root cause of the equipment failure or migration mishap. This temporary nature suggests that engineers are still working towards a more robust and permanent repair.
The restoration process itself was carefully managed and gradual. Rather than an instantaneous return to service, Orange implemented a phased re-synchronization of affected lines. This strategic approach was crucial to prevent a "signaling storm." Had millions of disconnected smartphones simultaneously attempted to reconnect and re-authenticate to the network core at the same instant, the ensuing deluge of requests would almost certainly have overwhelmed the already stressed infrastructure, leading to a secondary collapse and prolonging the outage. This explains why some subscribers experienced service restoration earlier than others, as lines were brought back online in controlled waves.
The provisional status of the current fix naturally raises questions about the network’s long-term stability and resilience. Customers and businesses will be looking for reassurances from Orange that the definitive solution will be implemented swiftly and without further disruption. The lack of a clear timeline for this permanent fix adds to the uncertainty.
Broader Implications and Precedents
This latest incident is not an isolated event but rather fits into a concerning pattern for Orange. The nearly ten-hour disruption on October 26, 2026, marks the operator’s third and longest national outage of the year. Previously, Orange’s mobile network experienced a significant seven-and-a-half-hour failure on January 30, followed by another major incident on June 29. Such repeated and prolonged outages for a leading national operator, particularly one that prides itself on network quality and reliability, raise serious questions about its infrastructure resilience, maintenance protocols, and capacity planning.
The economic and social repercussions of such a widespread and lengthy outage are substantial. In an increasingly digital-dependent society, mobile connectivity is not just a convenience but a critical utility. Businesses, from small local shops relying on mobile payment terminals to large enterprises with remote workforces, faced significant operational challenges and financial losses. Individuals were cut off from essential communication, including potentially emergency services, and vital information flows. The disruption underscores the fragility of modern digital ecosystems and the profound impact when core services fail.
This pattern of disruptions is likely to attract heightened scrutiny from ARCEP, the French telecommunications regulatory authority, which is responsible for monitoring service quality and ensuring network reliability. Orange may face inquiries regarding the root causes of these recurring issues and the measures being implemented to prevent future occurrences. Furthermore, the incident could inflict considerable damage on Orange’s brand reputation, potentially eroding customer trust and leading to increased churn, especially among its premium and business clientele.
Looking ahead, the outage also highlights the inherent complexities and risks associated with migrating to next-generation network architectures like 5G SA. While 5G SA promises transformative capabilities, its deployment requires highly robust, fault-tolerant, and meticulously managed core infrastructure. Any misstep during these delicate transitions can have far-reaching consequences. For Orange, the immediate challenge is to implement a permanent fix, provide full transparency to its customers and regulators regarding the incident’s causes and the number of affected lines, and articulate a clear strategy to bolster its network resilience to prevent such widespread failures in the future. The telecommunications landscape demands not only innovation but also unwavering reliability.
