Delta sues CrowdStrike over ‘catastrophic’ software glitch

Delta sues CrowdStrike over ‘catastrophic’ software glitch

The cybersecurity firm accuses the airline of shifting blame for its slow recovery from 'antiquated' IT systems.

CROWDSTRIKE
Delta stated that Crowdstrike’s faulty update resulted in at least US$500 million in out-of-pocket losses, alongside severe harm to its reputation. (AP pic)
NEW YORK:
Delta Air Lines Inc sued cybersecurity firm CrowdStrike Holdings Inc over the chaos caused this summer by a “catastrophic” software update that disabled millions of computers worldwide and grounded much of the airline’s passenger fleet.

The update crippled Delta’s operations for days, forcing thousands of flight cancellations and delays that affected more than a million of its customers, the airline said in the suit.

CrowdStrike apologised publicly after the July 19 glitch shut down computers running the Microsoft Windows operating system.

The disruption paralysed airports, banks, stock exchanges and businesses around the world — and proved especially challenging for Delta, which struggled for days to return its flight schedule to normal. CrowdStrike has since announced wide-ranging changes to how it tests and deploys content updates.

Delta says the faulty update cost the airline at least US$500 million in out-of-pocket losses — in addition to “severe harm to its reputation and goodwill,” according to the complaint, filed Friday in state court in Georgia.

CrowdStrike said in a statement that Delta’s claims are based on misinformation that “demonstrate a lack of understanding of how modern cybersecurity works, and reflect a desperate attempt to shift blame for its slow recovery away from its failure to modernise its antiquated IT infrastructure.”

The cybersecurity firm said it tried to reach an out-of-court resolution over the update, but “Delta has chosen a different path.”

Delta claims the software update was “forced” on the company — and wasn’t something its IT staff installed.

“These updates were pushed onto customers and their systems even when customers did not enable automatic update settings,” according to the complaint.

Delta’s claims against CrowdStrike include fraud, breach of contract, deceptive business practices and computer trespass.

CrowdStrike also faces investor litigation over the outage.

Stay current - Follow FMT on WhatsApp, Google news and Telegram

Subscribe to our newsletter and get news delivered to your mailbox.