Spreadsheet Incident Database

A partial accounting of high-impact spreadsheet failures. These are only the ones we know about. Studies suggest 88-94% of spreadsheets contain at least one error.

$8B+
Total Documented Losses
88-94%
Spreadsheets with Errors
10+
Years of Incidents
Undiscovered Errors

Major Spreadsheet Failures

2020Public Health England COVID-19 Data Loss

Root cause: Excel row limit exceeded during critical pandemic tracking

Impact: Contact tracing delayed for thousands of potential exposures

15,841 cases lost
2013Reinhart-Rogoff Austerity Error

Root cause: Accidentally excluded five countries from a formula range

Impact: Influenced austerity measures affecting millions across Europe

Global economic policy
2016Gene Name Autocorrection Crisis

Root cause: Automatic date conversion of gene names (SEPT1, MARCH1)

Impact: Widespread data corruption in published scientific research

20% of genomics papers
2012JPMorgan London Whale

Root cause: Copy-paste error in Value at Risk spreadsheet model

Impact: Largest trading loss in banking history at the time

$6.2 billion loss
2008Barclays Capital Hidden Row Error

Root cause: Hidden rows excluded from asset sale calculation

Impact: Unintended acquisition of 179 contracts during Lehman bankruptcy sale

$435 million
2012UK West Coast Rail Franchise

Root cause: Spreadsheet errors in bid evaluation model

Impact: Franchise cancelled, Transport Secretary resigned, legal settlements

£50M+ in costs
2011MI5 Intelligence Formatting Error

Root cause: Spreadsheet formatting error bugged 134 phone numbers

Impact: Warrants issued to tap wrong phones for over a year

National security
1994Fidelity Magellan Distribution Error

Root cause: Minus sign omitted when transferring data between spreadsheets

Impact: $2.6 billion capital gains distribution understated; surprise tax bills

$2.6 billion error
2003Fannie Mae Earnings Restatement

Root cause: Formula errors in mortgage hedge accounting spreadsheets

Impact: Largest earnings restatement in corporate history at the time

$1.3 billion restatement
2003TransAlta Bidding Error

Root cause: Copy-paste misalignment in power contract bids

Impact: Company purchased contracts at inflated prices

$24 million loss

Want to report an incident? Submit via our intake form (an Excel spreadsheet).

Spreadsheet CVE Database

Common Vulnerabilities and Exposures in Tabular Systems

CVE-2020-EXCEL-1
Row Limit Buffer Overflow Data truncation when exceeding 65,536/1,048,576 row limits without warning. Exploited in: PHE COVID-19 incident
CVE-2013-RANGE-1
Formula Range Exclusion SUM/AVERAGE formulas fail to update when rows inserted above range. Exploited in: Reinhart-Rogoff
CVE-2016-DATE-1
Autocorrect Injection Automatic date conversion corrupts gene names (SEPT1, MARCH1, DEC1). Exploited in: 20% of genomics papers
CVE-2012-PASTE-1
Copy-Paste Misalignment Pasted ranges fail to align with target cell references. Exploited in: London Whale ($6.2B)
CVE-2024-CIRC-1
Circular Reference Denial of Service Recursive formulas cause infinite calculation loops, freezing application. Exploited in: Status: Will not fix