Incident Response

CrowdStrike and Delta Fight Over Who’s to Blame for the Airline Canceling Thousands of Flights

CrowdStrike and Delta are fighting over who is to blame for the airline canceling thousands of flights following the massive outage.

Cybersecurity software company CrowdStrike is disputing Delta Air Lines over who is to blame for damage that the airline suffered after a global technology outage.

Delta’s CEO has threatened to sue CrowdStrike for what he said was $500 million in lost revenue and extra costs related to thousands of canceled flights.

A lawyer for CrowdStrike says, however, that the company’s liability should be less than $10 million.

Michael Carlinsky said in a letter Sunday to Delta lawyer David Boies that the airline’s threatened lawsuit “has contributed to a misleading narrative that CrowdStrike is responsible for Delta’s IT decisions and response to the outage.”

The CrowdStrike lawyer questioned why other airlines recovered from the outage much more quickly. He said the software company took responsibility for its actions “while Delta did not.”

A faulty software update from CrowdStrike to more than 8 million computers using Microsoft Windows disrupted airlines, banks, retailers and other businesses on July 19.

Advertisement. Scroll to continue reading.

Delta CEO Ed Bastian raised the threat of a lawsuit last week on CNBC. He said Delta was more dependent on Microsoft Windows than other airlines. The Atlanta-based airline hired Boies’ law firm to handle the matter.

Bastian said CrowdStrike did not offer to help Delta beyond offering free consulting advice. CrowdStrike said its CEO, George Kurtz, personally contacted Bastian to offer help, but got no response.

The U.S. Department of Transportation is investigating why Delta took longer to recover than other airlines. Transportation Secretary Pete Buttigieg said his department would also look into complaints about Delta’s customer service, including long waits for help and reports that unaccompanied minors were stranded at airports.

Related: CrowdStrike Faces Lawsuits From Customers, Investors

Related: 97% of Devices Disrupted by CrowdStrike Restored as Insurer Estimates Billions in Losses

Related: CrowdStrike Explains Why Bad Update Was Not Properly Tested

Related Content

Endpoint Security

CrowdStrike has fixed a critical LogScale vulnerability, while Tenable addressed a high-severity Nessus flaw.

Compliance

A judge has ruled that the plaintiffs failed to demonstrate intent to defraud investors. 

Funding/M&A

News of the move to acquire Seraphic comes less than a week after CrowdStrike announced an agreement to acquire identity security startup SGNL for...

Funding/M&A

The deal aims to bolster CrowdStrike's Falcon platform with "continuous identity" protection to secure human and AI-driven access in real-time.

Cybercrime

The company has confirmed that it terminated an insider who shared screenshots of his computer with cybercriminals.

Management & Strategy

CrowdStrike became a global partner of Mercedes’ F1 team in 2019, but Kurtz’s purchase into the ownership group was his personally.

Funding/M&A

CrowdStrike says the acquisition will bring valuable technology to enhance its Falcon Next-Gen SIEM.

Endpoint Security

Microsoft is preparing a private preview of new Windows endpoint security platform capabilities to help antimalware vendors create solutions that run outside the kernel.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version