iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
In its August 4, 2024 response, CrowdStrike apologized for the July 19 Falcon/Windows outage but strongly denied Delta’s allegations of gross negligence and willful misconduct. It said its testing and validation had been adequate, asserted that it offered Delta help within hours, and argued that Delta’s recovery depended on Delta’s own operational and resiliency decisions. The letter also invoked contractual limits on CrowdStrike’s liability. It was a party’s position in a developing dispute—not a court’s finding about fault.
What did CrowdStrike say in its response?
Michael B. Carlinsky of Quinn Emanuel sent the August 4 letter on CrowdStrike’s behalf in response to a July 29 letter from Delta’s counsel, David Boies. The dispute concerned the July 19, 2024 Falcon sensor content update that affected Windows systems. Delta’s later complaint identified the event as the Channel File 291 incident.
Carlinsky wrote: “CrowdStrike reiterates its apology to Delta, its employees, and its customers.” The letter expressed empathy for the disruption while rejecting Delta’s claims that CrowdStrike had acted with gross negligence or willful misconduct.
Testing and validation
Delta’s July 29 letter alleged that the update had not been adequately stress-tested and threatened litigation. CrowdStrike disputed that account, saying Delta’s testing-and-validation allegation was contradicted by CrowdStrike’s Preliminary Post Incident Review. That is CrowdStrike’s characterization of its own review; the response letter does not independently resolve the technical dispute.
#1 Best Overall
![Norton 360 Deluxe 2027 Antivirus, 3 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41qw3FS3qLL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 3 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
Offers of assistance and recovery
CrowdStrike said it contacted Delta within hours of the incident and that its CEO offered onsite assistance. The letter asserted that Delta did not respond to or need those onsite resources. It also criticized Delta’s public litigation threat as creating a misleading account of responsibility for Delta’s IT decisions and recovery.
In other words, CrowdStrike’s explanation for Delta’s prolonged recovery was that the airline’s own operational response and IT resiliency choices mattered, not simply the initial software update. The response presents that as CrowdStrike’s position; it does not establish a final finding about why recovery took as long as it did.
Rank #2
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
Did CrowdStrike admit fault?
The letter apologized and acknowledged the disruption, but it did not admit gross negligence or willful misconduct. CrowdStrike expressly denied those allegations and contested Delta’s account of its testing and validation. An apology for the impact is not, by itself, an admission of the specific legal fault Delta alleged.
How much was Delta seeking, and what losses did it report?
In an August 8, 2024 SEC Form 8-K, Delta said the outage led to approximately 7,000 flight cancellations over five days and that it was pursuing at least $500 million from CrowdStrike and Microsoft. Delta described the following amounts as estimates in that filing; they are not court-established damages:
Rank #3
![Norton 360 Deluxe 2027 Antivirus, 5 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41IYV5zGyCL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 5 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
| Delta’s reported figure | What it referred to | Source and qualification |
|---|---|---|
| Approximately 7,000 cancellations | Flight cancellations over five days | Delta Air Lines’ August 8, 2024 SEC Form 8-K |
| At least $500 million | Damages Delta said it was pursuing from CrowdStrike and Microsoft | Delta Air Lines’ August 8, 2024 SEC Form 8-K |
| $380 million | Estimated direct revenue impact | Delta Air Lines’ August 8, 2024 SEC Form 8-K |
| $170 million | Estimated non-fuel expense | Delta Air Lines’ August 8, 2024 SEC Form 8-K |
Delta CEO Ed Bastian wrote in the filing: “An operational disruption of this length and magnitude is unacceptable, and our customers and employees deserve better.” Delta’s reported amounts describe its estimates and claim, not a finding that either company owed that sum.
Did the contract cap damages?
CrowdStrike’s October 25, 2024 federal declaratory-judgment complaint quoted the parties’ June 30, 2022 Subscription Services Agreement. CrowdStrike relied on the agreement’s liability provisions in arguing that Delta’s potential recovery was limited. The complaint was CrowdStrike’s pleading, not a ruling that the provisions applied to the incident.
Rank #4
- SPEED-OPTIMIZED, CROSS-PLATFORM PROTECTION: World-class antivirus security and cyber protection for Windows (Windows 7 with Service Pack 1, Windows 8, Windows 8.1, Windows 10, and Windows 11), Mac OS (Yosemite 10.10 or later), iOS (11.2 or later), and Android (5.0 or later). Organize and keep your digital life safe from hackers
- SAFE ONLINE BANKING: A unique, dedicated browser secures your online transactions; Our Total Security product also includes 200MB per day of our new and improved Bitdefender VPN
- ADVANCED THREAT DEFENSE: Real-Time Data Protection, Multi-Layer Malware and Ransomware Protection, Social Network Protection, Game/Movie/Work Modes, Microphone Monitor, Webcam Protection, Anti-Tracker, Phishing, Fraud, and Spam Protection, File Shredder, Parental Controls, and more
- ECO-FRIENDLY PACKAGING: Your product-specific code is printed on a card and shipped inside a protective cardboard sleeve. Simply open packaging and scratch off security ink on the card to reveal your activation code. No more bulky box or hard-to-recycle discs. PLEASE NOTE: Product packaging may vary from the images shown, however the product is the same.
| Agreement provision | What the complaint says it provides |
|---|---|
| Section 9.1 | Each party’s liability may not exceed two times the fees paid for the relevant subscription term. |
| Section 9.2 | Excludes indirect, incidental, punitive, and consequential damages, including lost revenues, profits, or goodwill. |
| Section 9.3 | The stated limits do not apply to liability arising from gross negligence or willful misconduct. |
The August 4 letter described CrowdStrike’s potential liability as capped at an amount in the “single-digit millions.” The later complaint supplied the two-times-fees language on which CrowdStrike relied. Whether the cap or damages exclusions govern Delta’s claims depends on the contract and the dispute’s resolution; the gross-negligence and willful-misconduct exception is central because Delta alleged that kind of conduct.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →How the dispute developed
- July 19, 2024: A CrowdStrike Falcon sensor content update caused the Windows-related outage later identified in Delta’s complaint as the Channel File 291 incident.
- July 29, 2024: Delta counsel David Boies alleged gross negligence or willful misconduct, challenged the update’s testing, and threatened litigation.
- August 4, 2024: CrowdStrike counsel Michael B. Carlinsky apologized for the impact, denied the allegations, described the company’s account of testing and assistance, and invoked contractual liability limits.
- August 8, 2024: Delta disclosed its cancellation and loss estimates in an SEC Form 8-K and said it was pursuing at least $500 million from CrowdStrike and Microsoft.
- October 25, 2024: CrowdStrike filed a federal declaratory-judgment complaint seeking enforcement of the contractual limits and a determination that it was not grossly negligent or guilty of willful misconduct.
What the letter does—and does not—establish
The August 4 letter sets out CrowdStrike’s defense and account of its conduct. Delta’s SEC filing records Delta’s estimates and claim, while CrowdStrike’s October complaint states the relief CrowdStrike sought. None of those documents, on its own, adjudicates ultimate liability or determines how any damages should be allocated between the parties.
Quick Recap
Best Value
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
