David Boise of the Boise Schiller Flexner, the law firm hired by Delta Air Lines, asked for damages in order to cover their losses as well as litigation costs and punitive damages.
“CrowdStrike caused a global catastrophe because it cut corners, took shortcuts, and circumvented the very testing and certification processes it advertised, for its own benefit and profit,” wrote Delta in the complaint. “If CrowdStrike had tested the Faulty Update on even one computer before deployment, the computer would have crashed.”.
Even more so, Delta had already disabled automatic updates from Crowdstrike, yet the update reached their computers anyway. Crowdstrike's Falcon software reached an unauthorized door in the Windows operating system and acted without Delta’s knowledge. The airline company also said that it would never have authorized this update.
“The havoc that was created deserves, in my opinion, to be fully compensated for,” said Ed Bastian, Delta’s CEO to CNBC. George Kurtz, CEO of Crowdstrike, has already apologized for the incident and said that the company is committed to modifying its practices in order to prevent similar events.
“While we aimed to reach a business resolution that puts customers first, Delta has chosen a different path,” said a spokesperson from Crowdstrike in an email for CNBC, and that “Delta’s claims are based on disproven misinformation, demonstrate a lack of understanding of how modern cybersecurity works, and reflect a desperate attempt to shift blame for its slow recovery away from its failure to modernize its antiquated IT infrastructure.”.