Faulty Channel File 291 update published
CrowdStrike said a Rapid Response Content update meant to gather telemetry on new threat techniques was published to Windows hosts running Falcon sensor 7.11 and above.
On July 19, 2024, a faulty content update to CrowdStrike's Falcon sensor caused Windows computers worldwide to crash, disrupting airlines, banks, hospitals and other businesses. Microsoft estimated about 8.5 million Windows devices were affected. CrowdStrike published a root cause analysis and testified to Congress, and courts have since dismissed passenger and shareholder suits while Delta Air Lines' suit continues.
Delta's lawsuit against CrowdStrike is in discovery in the Metro Atlanta Business Case Division after a May 2025 ruling let part of it proceed, CrowdStrike reported in August 2026. The shareholder suit ended in a final judgment in January 2026, and the Fifth Circuit affirmed dismissal of the passenger suit in May 2026.
CrowdStrike said a Rapid Response Content update meant to gather telemetry on new threat techniques was published to Windows hosts running Falcon sensor 7.11 and above.
According to CrowdStrike, Windows hosts that were online and received the update crashed with a blue screen. Mac and Linux hosts were not affected.
CrowdStrike said the defect was reverted at 05:27 UTC, and Channel File 291 versions timestamped 0527 UTC or later were the good version. Machines that had already crashed needed remediation.
Microsoft vice president David Weston wrote that the update affected about 8.5 million Windows devices, which he described as less than one percent of all Windows machines.
CrowdStrike later told Congress that automated recovery techniques became available from July 22, alongside manual remediation and staff deployed to customers.
Transportation Secretary Pete Buttigieg said the Department of Transportation had opened an investigation into Delta Air Lines' handling of the disruption and its treatment of passengers.
CrowdStrike published a preliminary review committing to expanded testing, staggered canary deployments, customer control over update timing and independent code reviews.
CrowdStrike said more than 97% of Windows sensors were online as of 5 p.m. Pacific time, compared with before the update.
In its final post incident measurement, CrowdStrike said about 99% of Windows sensors were online compared with the week before, noting a typical weekly variance of about 1%.
CrowdStrike said a mismatch between the 20 input fields the sensor expected and the 21 the update supplied caused an out of bounds memory read. It said a third party review confirmed the bug could not be exploited by a threat actor.
Adam Meyers testified before the House Homeland Security subcommittee on cybersecurity, chaired by Andrew Garbarino. He apologized and said the incident was not a cyberattack but was caused by a CrowdStrike rapid response content update.
Delta sued CrowdStrike in Fulton County Superior Court, alleging among other things computer trespass, breach of contract and gross negligence. Delta said the outage cost more than $500 million, and AP reported about 7,000 canceled flights over five days.
CrowdStrike filed a declaratory judgment suit against Delta in the US District Court for the Northern District of Georgia on the same day, according to the court docket.
After Delta moved to dismiss, CrowdStrike filed a notice of voluntary dismissal of its Northern District of Georgia suit, and the case was terminated on November 25, 2024, the docket shows.
Judge Kelly Lee Ellerbe allowed Delta's negligence and computer trespass claims to proceed and dismissed claims of intentional misrepresentation and fraud by omission, according to the order as reported by The Register. CrowdStrike described the ruling as granting its motion to dismiss in part.
US District Judge Robert Pitman in the Western District of Texas dismissed a consolidated class action by airline passengers whose flights were delayed or canceled and entered final judgment. The plaintiffs appealed to the Fifth Circuit on June 25, 2025.
The federal court in Austin granted CrowdStrike's motion to dismiss a securities class action led by New York State Comptroller Thomas DiNapoli. The plaintiffs said they would not amend, final judgment was entered on January 28, 2026, and no appeal was filed, according to CrowdStrike.
The Fifth Circuit affirmed the dismissal of the passengers' class action and on June 15, 2026 denied rehearing, CrowdStrike reported in its August 2026 quarterly filing.
Elon Musk co-founded OpenAI as a nonprofit in 2015 and left its board in 2018. He sued in 2024, alleging OpenAI and Sam Altman abandoned its charitable mission, and led a...
OpenAI was announced in December 2015 as a nonprofit artificial intelligence research lab and later added a capped-profit arm that drew billions of dollars from Microsoft...
On June 12, 2025, Air India flight 171, a Boeing 787-8 bound for London Gatwick, crashed into buildings in Ahmedabad shortly after takeoff, killing 241 of the 242 people ...
On January 5, 2024, the left mid exit door plug separated from an Alaska Airlines Boeing 737-9 climbing out of Portland, Oregon, and the airplane returned and landed safe...
Last updated 31 October 2026. Spotted an error? See corrections. Every event links to the record it comes from. Allegations are attributed to whoever made them.