CrowdStrike Outage Lawsuit: The Global IT Crash Fallout

The Outage

On July 19, 2024, the cybersecurity firm CrowdStrike pushed a faulty update to its widely used “Falcon” security software, and the result was one of the largest IT outages in history. The bad update caused an estimated 8.5 million Microsoft Windows computers around the world to crash into the “blue screen of death” — simultaneously. Because Falcon runs on critical systems, the fallout was immediate and global: airlines grounded flights, hospitals and banks were disrupted, broadcasters went dark and countless businesses ground to a halt, unable to reboot machines without hands-on fixes.

It was a stark demonstration of how dependent modern infrastructure is on a handful of software vendors, and how a single flawed update can cascade worldwide.

The Dueling Lawsuits

The most prominent legal fight is between Delta Air Lines and CrowdStrike. Delta, which canceled roughly 7,000 flights and says it disrupted 1.3 million passengers and lost more than $500 million, sued CrowdStrike, alleging it forced out untested, faulty updates. CrowdStrike countersued, arguing Delta’s own outdated IT systems and slow recovery — not the update alone — caused the extended chaos, and that its liability is limited by contract. A court has allowed Delta’s case to proceed. Separately, Delta passengers filed a class action against the airline over how it handled the cancellations.

So this is a genuinely contested, two-sided dispute over who bears responsibility for the losses, not a clear-cut win for either side.

What It Means

For businesses, the episode is a lesson in concentration risk and disaster recovery: even a trusted security vendor can cause an outage, and contracts often cap a vendor’s liability, so resilience and backups matter. For consumers, there is no payout to claim from the outage itself; if you were a stranded traveler, your remedies run through the airline’s obligations and any consumer-protection rules, not through the CrowdStrike litigation.