Incident

How the 2024 CrowdStrike outage unfolded

On July 19, 2024, a faulty content update to CrowdStrike's Falcon sensor caused Windows computers worldwide to crash, disrupting airlines, banks, hospitals and other businesses. Microsoft estimated about 8.5 million Windows devices were affected. CrowdStrike published a root cause analysis and testified to Congress, and courts have since dismissed passenger and shareholder suits while Delta Air Lines' suit continues.

19 July 2024 to today · 18 dated events · 13 sources
Where it stands now · as of 31 October 2026

Delta's lawsuit against CrowdStrike is in discovery in the Metro Atlanta Business Case Division after a May 2025 ruling let part of it proceed, CrowdStrike reported in August 2026. The shareholder suit ended in a final judgment in January 2026, and the Fifth Circuit affirmed dismissal of the passenger suit in May 2026.

Windows devices affected8.5 millionMicrosoft estimate, under 1% of Windows machines
faulty update live78 minutes04:09 to 05:27 UTC per CrowdStrike
Delta's claimed cost$500 millionDelta's estimate of lost revenue and extra expenses
Delta flights canceled7,000about 7,000 over five days, per AP
2024
19 Jul 202404:09 UTC
Turning point
Start

Faulty Channel File 291 update published

CrowdStrike said a Rapid Response Content update meant to gather telemetry on new threat techniques was published to Windows hosts running Falcon sensor 7.11 and above.

19 Jul 202404:09 UTC
Incident

Windows hosts begin to crash

According to CrowdStrike, Windows hosts that were online and received the update crashed with a blue screen. Mac and Linux hosts were not affected.

19 Jul 202405:27 UTC
Product

CrowdStrike reverts the update

CrowdStrike said the defect was reverted at 05:27 UTC, and Channel File 291 versions timestamped 0527 UTC or later were the good version. Machines that had already crashed needed remediation.

20 Jul 2024
Statement

Microsoft estimates 8.5 million devices hit

Microsoft vice president David Weston wrote that the update affected about 8.5 million Windows devices, which he described as less than one percent of all Windows machines.

22 Jul 2024
Product

Automated fixes begin

CrowdStrike later told Congress that automated recovery techniques became available from July 22, alongside manual remediation and staff deployed to customers.

23 Jul 2024
Investigation

DOT investigates Delta's recovery

Transportation Secretary Pete Buttigieg said the Department of Transportation had opened an investigation into Delta Air Lines' handling of the disruption and its treatment of passengers.

“We have made clear to Delta that they must take care of their passengers and honor their customer service commitments.”Pete Buttigieg, US Transportation Secretary, Atlanta News First
24 Jul 2024
Statement

Preliminary post incident review published

CrowdStrike published a preliminary review committing to expanded testing, staggered canary deployments, customer control over update timing and independent code reviews.

24 Jul 2024
Statement

Over 97% of sensors back online

CrowdStrike said more than 97% of Windows sensors were online as of 5 p.m. Pacific time, compared with before the update.

29 Jul 2024
Statement

About 99% of sensors back online

In its final post incident measurement, CrowdStrike said about 99% of Windows sensors were online compared with the week before, noting a typical weekly variance of about 1%.

6 Aug 2024
Turning point
Finding

CrowdStrike publishes root cause analysis

CrowdStrike said a mismatch between the 20 input fields the sensor expected and the 21 the update supplied caused an out of bounds memory read. It said a third party review confirmed the bug could not be exploited by a threat actor.

“The sensor expected 20 input fields, while the update provided 21 input fields.”CrowdStrike root cause analysis, CrowdStrike
24 Sep 2024
Investigation

CrowdStrike executive testifies to House panel

Adam Meyers testified before the House Homeland Security subcommittee on cybersecurity, chaired by Andrew Garbarino. He apologized and said the incident was not a cyberattack but was caused by a CrowdStrike rapid response content update.

“On behalf of everyone at CrowdStrike, I want to apologize.”Adam Meyers, CrowdStrike, House Committee on Homeland Security
25 Oct 2024
Turning point
Filing

Delta sues CrowdStrike in Georgia

Delta sued CrowdStrike in Fulton County Superior Court, alleging among other things computer trespass, breach of contract and gross negligence. Delta said the outage cost more than $500 million, and AP reported about 7,000 canceled flights over five days.

2025
16 May 2025
Ruling

Judge lets most of Delta's case proceed

Judge Kelly Lee Ellerbe allowed Delta's negligence and computer trespass claims to proceed and dismissed claims of intentional misrepresentation and fraud by omission, according to the order as reported by The Register. CrowdStrike described the ruling as granting its motion to dismiss in part.

🇺🇸 Fulton County, GeorgiaThe RegisterCrowdStrike via SEC EDGAR#
18 Jun 2025
Ruling

Passenger lawsuit dismissed

US District Judge Robert Pitman in the Western District of Texas dismissed a consolidated class action by airline passengers whose flights were delayed or canceled and entered final judgment. The plaintiffs appealed to the Fifth Circuit on June 25, 2025.

2026
12 Jan 2026
Ruling

Shareholder suit dismissed

The federal court in Austin granted CrowdStrike's motion to dismiss a securities class action led by New York State Comptroller Thomas DiNapoli. The plaintiffs said they would not amend, final judgment was entered on January 28, 2026, and no appeal was filed, according to CrowdStrike.

Related timelines

Sources

13 records, ranked by type
  1. 1Subject's own statement29 Jul 2024
    Falcon Content Update Remediation and Guidance Hub
    CrowdStrike · crowdstrike.com
  2. 2Subject's own statement24 Jul 2024
    Preliminary Post Incident Review, Executive Summary
    CrowdStrike · crowdstrike.com
  3. 3Subject's own statement6 Aug 2024
    Channel File 291 Incident Root Cause Analysis, Executive Summary
    CrowdStrike · crowdstrike.com
  4. 4Subject's own statement20 Jul 2024
    Helping our customers through the CrowdStrike outage
    Microsoft · blogs.microsoft.com
  5. 5Subject's own statement24 Sep 2024
    Testimony of Adam Meyers, CrowdStrike, before the Subcommittee on Cybersecurity and Infrastructure Protection
    House Committee on Homeland Security · homeland.house.gov
  6. 6News report23 Jul 2024
    Investigation opened into Delta's response to global CrowdStrike outage
    Atlanta News First · atlantanewsfirst.com
  7. 7Social media post25 Oct 2024
    Delta sues cybersecurity firm CrowdStrike over tech outage that canceled flights
    Associated Press via News4Jax · news4jax.com
  8. 8News report21 May 2025
    Judge allows Delta's lawsuit against CrowdStrike to proceed
    The Register · theregister.com
  9. 9News report14 Jan 2026
    CrowdStrike Defeats Shareholder Lawsuit Over Huge Software Outage
    Insurance Journal · insurancejournal.com
  10. 10Official record24 Sep 2024
    An Outage Strikes: Assessing the Global Impact of CrowdStrike's Faulty Software Update, Serial No. 118-81
    US Government Publishing Office (House hearing record) · govinfo.gov
  11. 11Official record25 Nov 2024
    CrowdStrike, Inc. v. Delta Air Lines, Inc., 1:24-cv-04904 (N.D. Ga.), docket
    CourtListener (RECAP docket) · courtlistener.com
  12. 12Subject's own statement27 Aug 2026
    CrowdStrike Holdings Form 10-Q for the quarter ended July 31, 2026, Note 11 Commitments and Contingencies
    CrowdStrike via SEC EDGAR · sec.gov
  13. 13Subject's own statement5 Mar 2026
    CrowdStrike Holdings Form 10-K for the year ended January 31, 2026, Note 10 Commitments and Contingencies
    CrowdStrike via SEC EDGAR · sec.gov

Last updated 31 October 2026. Spotted an error? See corrections. Every event links to the record it comes from. Allegations are attributed to whoever made them.