A Georgia state judge has ruled that Delta Air Lines can proceed with most of its lawsuit against CrowdStrike, the cybersecurity firm accused of causing a massive computer outage in July 2024. The outage led to the cancellation of 7,000 flights, disrupting travel for 1.4 million passengers and resulting in $550 million in losses for the airline.
Legal Claims Against CrowdStrike
Delta alleges that CrowdStrike was grossly negligent in deploying a defective update for its Falcon software, which crashed more than 8 million Microsoft Windows-based computers worldwide. The airline argues that proper testing could have prevented the error, citing CrowdStrike’s own admission that it did something “horribly wrong”.
The judge’s ruling allows Delta to pursue claims of:
- Gross negligence related to the faulty software update.
- Computer trespass, alleging unauthorized interference with Delta’s systems.
- Fraudulent misrepresentation, asserting that CrowdStrike falsely assured Delta that no unauthorized access would be introduced.
CrowdStrike’s Response
CrowdStrike has denied wrongdoing, with its legal team expressing confidence that the case will either be dismissed or result in limited damages. The company maintains that Delta’s outdated IT infrastructure contributed to the prolonged disruption, arguing that other airlines recovered more quickly from the outage.
Broader Impact and Passenger Lawsuits
The July 19, 2024 outage affected multiple airlines, but Delta was among the hardest hit. In addition to its lawsuit against CrowdStrike, Delta is also facing a class-action lawsuit from passengers who claim the airline unlawfully refused full refunds for canceled flights.
The case, Delta Air Lines Inc. v. CrowdStrike Inc., is being heard in the Georgia Superior Court, Fulton County. As legal proceedings continue, the outcome could set a precedent for corporate liability in cybersecurity failures.
