Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Incident Response

CrowdStrike and Delta Fight Over Who’s to Blame for the Airline Canceling Thousands of Flights

CrowdStrike and Delta are fighting over who is to blame for the airline canceling thousands of flights following the massive outage.

CrowdStrike hits back at Delta

Cybersecurity software company CrowdStrike is disputing Delta Air Lines over who is to blame for damage that the airline suffered after a global technology outage.

Delta’s CEO has threatened to sue CrowdStrike for what he said was $500 million in lost revenue and extra costs related to thousands of canceled flights.

A lawyer for CrowdStrike says, however, that the company’s liability should be less than $10 million.

Michael Carlinsky said in a letter Sunday to Delta lawyer David Boies that the airline’s threatened lawsuit “has contributed to a misleading narrative that CrowdStrike is responsible for Delta’s IT decisions and response to the outage.”

The CrowdStrike lawyer questioned why other airlines recovered from the outage much more quickly. He said the software company took responsibility for its actions “while Delta did not.”

A faulty software update from CrowdStrike to more than 8 million computers using Microsoft Windows disrupted airlines, banks, retailers and other businesses on July 19.

Advertisement. Scroll to continue reading.

Delta CEO Ed Bastian raised the threat of a lawsuit last week on CNBC. He said Delta was more dependent on Microsoft Windows than other airlines. The Atlanta-based airline hired Boies’ law firm to handle the matter.

Bastian said CrowdStrike did not offer to help Delta beyond offering free consulting advice. CrowdStrike said its CEO, George Kurtz, personally contacted Bastian to offer help, but got no response.

The U.S. Department of Transportation is investigating why Delta took longer to recover than other airlines. Transportation Secretary Pete Buttigieg said his department would also look into complaints about Delta’s customer service, including long waits for help and reports that unaccompanied minors were stranded at airports.

Related: CrowdStrike Faces Lawsuits From Customers, Investors

Related: 97% of Devices Disrupted by CrowdStrike Restored as Insurer Estimates Billions in Losses

Related: CrowdStrike Explains Why Bad Update Was Not Properly Tested

Written By

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.

Register

AI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.

Register

People on the Move

Stephen Garcia has been named Chief Information Security Officer at BreachRx.

Kasper Lindgaard has been appointed Vice President of Security Strategy at CoreView.

Chaim Mazal has been named Chief Information Security Officer at GitLab.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.