CrowdStrike Response to Delta Air Lines IT Outage

Delta Air Lines suffered a significant IT outage in 2022, affecting thousands of passengers and employees. The incident highlighted the importance of robust cybersecurity measures in preventing such disruptions.

CrowdStrike's Falcon platform was instrumental in helping Delta identify and contain the threat. According to CrowdStrike, the incident was caused by a malicious actor exploiting a vulnerability in Delta's IT systems.

Delta's IT team worked closely with CrowdStrike to implement a containment strategy, which involved isolating the affected systems and preventing further damage. This swift action helped minimize the impact of the outage.

The incident served as a wake-up call for Delta, prompting them to reassess their cybersecurity posture and invest in more robust protection measures.

A different take: Cyber Insurance Incident Response

CrowdStrike's response to Delta's legal threats has been clear and direct. They have repeatedly stated that they are "highly disappointed" by Delta's suggestion that CrowdStrike acted inappropriately.

CrowdStrike's CEO, George Kurtz, personally reached out to Delta's CEO, Ed Bastian, to offer onsite assistance after the outage, but received no response. This lack of communication has contributed to a misleading narrative that CrowdStrike is responsible for Delta's IT decisions and response to the outage.

You might enjoy: Delta Ceo Says Crowdstrike Outage Will Cost Carrier $500 Million.

Delta's threat of litigation has been seen as a distraction from the recovery effort. CrowdStrike's lawyer, Michael Carlinsky, wrote in a letter to Delta's lawyer that the airline's pursuit of a lawsuit would be "unfortunate" but that CrowdStrike would "respond aggressively" to protect its shareholders, employees, and stakeholders.

The key issue here is that Delta's liability for the outage is not just financial, but also reputational. The airline has already lost millions of dollars due to the cancellations and delays, and the damage to its brand and reputation could be irreparable.

CrowdStrike's liability for the outage is contractually capped at an amount in the single-digit millions. This means that even if Delta does pursue a lawsuit, the financial consequences for CrowdStrike would be relatively limited.

Here are the key points to consider:

Ultimately, the situation between CrowdStrike and Delta is complex and multifaceted. However, one thing is clear: CrowdStrike is not taking Delta's threats lying down.

Delta's decision to pursue legal action against CrowdStrike has led to a heated exchange between the two companies. CrowdStrike's lawyer, Michael Carlinsky, has fired back at Delta's threats, saying they've contributed to a "misleading narrative" that CrowdStrike is responsible for the airline's IT decisions and response to the outage.

Delta turned down on-site assistance from CrowdStrike after the July 19 outage, which caused thousands of flight cancellations. This decision has been cited as a key factor in Delta's slow recovery compared to its rivals.

CrowdStrike's liability is capped at under $10 million, according to its lawyer. This is a fraction of the estimated $500 million in losses Delta claims to have incurred due to the outage.

The airline canceled over 5,000 flights between July 19 and July 25, taking longer to recover than its competitors. This has led to a significant loss of revenue for Delta, with CEO Ed Bastian estimating the total cost at $500 million.

Explore further: Delta Says Crowdstrike Outage Cost It $550 Million

Here are the key points in the dispute between Delta and CrowdStrike:

Delta's decision to pursue legal action against CrowdStrike may ultimately backfire, as the cyber-security firm has pointed out that it was Delta that failed to take responsibility for its actions during the outage.