CrowdStrike shareholders lose battle to recoup losses from 2024 outage
- Reference: 1768428788
- News link: https://www.theregister.co.uk/2026/01/14/crowdstrike_shareholders_lawsuit_dismiss/
- Source link:
The plaintiffs in the case alleged 15 statements from CrowdStrike leadership were misleading. US District Judge Robert Pitman of the Western District of Texas [1]ruled [PDF] on Monday that, while he agreed two of those statements were plausibly misleading, the shareholders failed to plausibly plead that they were made with the intent to defraud investors, a required element of a securities-fraud claim.
"Plaintiffs have failed to plausibly plead a strong inference of scienter [intent or knowledge of wrongdoing] for the individual Defendants or for CrowdStrike itself," Pitman opined. "Thus, even though the Court found … that Plaintiffs had plausibly alleged two misleading statements, the Court will grant Defendants' motion to dismiss."
[2]
For those who don't recall CrowdStrike's terrible, horrible, no good, very bad day in July 2024, the world [3]ground to a halt after the company pushed a faulty Falcon sensor content configuration update for Windows. Millions of machines around the world promptly face-planted into blue screens of death.
[4]
[5]
The update was malformed, and CrowdStrike's internal validation system, designed to ensure updates didn't cause serious snafus, failed to catch the issue, as the company later explained in a post-mortem. CrowdStrike acknowledged it had made a mistake, causing its share price to [6]plummet and leaving the company with months of uncertainty for investors, many of whom are institutional.
One such institutional group was the Plymouth County Retirement Association, which [7]filed a lawsuit in July 2024. Other parties signed on to the suit, turning it into a class action complaint under the [8]leadership of New York State Comptroller Thomas DiNapoli, who oversees the New York State Common Retirement Fund, one of the institutional CrowdStrike investors who lost money following the outage. Pitman dismissed the case this week.
[9]
He's previously dismissed other suits related to the outage, too.
In June of last year, he tossed a lawsuit against CrowdStrike filed by a group of airline customers who were left stranded following the outage. Plaintiffs in that case sought relief for their inconveniences from CrowdStrike, arguing that the company's sloppy update screening process ended up costing them time and money they wanted back.
Pitman dismissed that case on the [10]grounds that the federal Airline Deregulation Act (ADA) preempted the passengers' claims, because the alleged harm was "related to" airline services such as scheduling and boarding, triggering the ADA's preemption clause. The fact that the passengers sued CrowdStrike rather than the airlines themselves didn't change the analysis, Pitman said, because the claims were still "related to" airline services and therefore barred.
[11]
He also ruled in favor of CrowdStrike over statements made by its president, Michael Sentonas, who said in an April 2023 investor briefing that CrowdStrike's agent architecture does not trigger blue screens when updates fail.
[12]As agents run amok, CrowdStrike's $740M SGNL deal aims to help get a grip on identity security
[13]After that 2024 Windows fiasco, CrowdStrike has a plan – job cuts, leaning on AI
[14]CrowdStrike file update bricks Windows machines around the world
[15]CrowdStrike's Falcon Sensor also linked to Linux kernel panics and crashes
"Agent cloud architecture … doesn't require a massive tuning burden and doesn't blue screen endpoints with failed updates," court documents quote Sentonas as saying.
As CrowdStrike argued in its motion to dismiss, Sentonas' statement was not a promise that CrowdStrike could never trigger a blue screen outage under any circumstances.
"The Court agrees with Defendant that this statement by Defendant Sentonas is not actionable," Pitman decided in his dismissal order, further describing it as "arguably immaterial puffery" rather than a concrete claim capable of supporting a securities-fraud charge.
"We appreciate the Court's thoughtful consideration and decision to dismiss this case," CrowdStrike Chief Legal Officer Cathleen Anderson told The Register .
We note the case was dismissed without prejudice, and Pitman has given the plaintiffs a chance to file an amended complaint, so the case isn't over yet.
When asked how it plans to respond, DiNapoli's office only told us that "the decision is under review."
Delta Air Lines, which also sued CrowdStrike to recover damages from the outage, has [16]defeated a motion to dismiss its own lawsuit against the company in Georgia state court. That case is ongoing. ®
Get our [17]Tech Resources
[1] https://regmedia.co.uk/2026/01/14/crowdstrike-shareholder-lawsuit-dismissal.pdf
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2aWlxnBS2mA8mNB1FVvDpfAAAAok&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://www.theregister.com/2024/07/25/crowdstrike_timeline/
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aWlxnBS2mA8mNB1FVvDpfAAAAok&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aWlxnBS2mA8mNB1FVvDpfAAAAok&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://www.theregister.com/2024/11/27/crowdstrike_q3_2025/
[7] https://www.theregister.com/2024/08/01/crowdstrike_lawsuit/
[8] https://www.osc.ny.gov/press/releases/2024/10/dinapoli-named-lead-plaintiff-crowdstrike-shareholder-lawsuit
[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aWlxnBS2mA8mNB1FVvDpfAAAAok&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[10] https://www.expertinstitute.com/resources/insights/crowdstrike-customer-class-action-2024-outage/
[11] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aWlxnBS2mA8mNB1FVvDpfAAAAok&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[12] https://www.theregister.com/2026/01/08/crowdstrikes_740m_sgnl_deal_proves/
[13] https://www.theregister.com/2025/05/07/crowdstrike_trims_workforce_ai/
[14] https://www.theregister.com/2024/07/19/crowdstrike_falcon_sensor_bsod_incident/
[15] https://www.theregister.com/2024/07/21/crowdstrike_linux_crashes_restoration_tools/
[16] https://www.theregister.com/2025/05/21/judge_allows_deltas_lawsuit_against/
[17] https://whitepapers.theregister.com/
Reminds me a lot of the YouTube video of a [1]dog attacking its own leg .
Except the dog's much smarter.
[1] https://www.youtube.com/watch?v=2O15DXv3Vwg
No that's not how it works, if the shareholders win then the members of the board of directors are personally liable to pay them. That's why the burden of proof is so high.
"they're welcome to try again"
No.
They are investors. That should mean that they believe in the future of the company.
If that is not the case, they sell their shares and they put their money elsewhere.
Tribunals should not be bothered by this bullshit.
Re: "they're welcome to try again"
Yup exactly, if you invest in a company then you should be doing everything you can to make it grow value for you. Not drag its reputation further through the mud for a perceived loss that you signed up to the possibility of, when you first invested.
Morons.
"Agent cloud architecture … doesn't require a massive tuning burden and doesn't blue screen endpoints with failed updates," court documents quote Sentonas as saying.
As CrowdStrike argued in its motion to dismiss, Sentonas' statement was not a promise that CrowdStrike could never trigger a blue screen outage under any circumstances.
I mean i kind sounds like Clownstrike were promising that their updates wouldn't cause a BSOD, and thats exactly what happened in July 2024 though.
What were the misleading statements?
[1]In re Crowdstrike Holdings, inc. securities litigation :
‘Plaintiffs allege that CrowdStrike’s website also contained multiple false or misleading statements about its testing. CrowdStrike’s website represented that the company “always [does] canary deployments of new services before rolling out changes to the entire fleet,” ..
In addition .. The website specifically stated that the company complies with FedRAMP and with DoD Impact Level 4 ..
Plaintiffs plead that the above-described representations by CrowdStrike that they claim were false or misleading were material to investors.’
[1] https://regmedia.co.uk/2026/01/14/crowdstrike-shareholder-lawsuit-dismissal.pdf
A corporation's money belongs to the members of the corporation. The members are AKA "shareholders".. So shareholders attempt to claim compensation from themselves. They pay lawyers to do this on their behalf. They also pay lawyers to defend themselves against the claim.
If they win they pay themselves. If they lose they keep the money they'd have claimed. The lawyers get paid anyway.
I wonder who instigated this.