The Transportation Security Administration (TSA) has yet to comment on allegations made by cybersecurity firm CrowdStrike against Delta Air Lines. CrowdStrike claims that Delta failed to implement a critical security update, which has become a focal point in an ongoing legal battle between the two companies. The lawsuit stems from a significant outage that Delta attributes to CrowdStrike’s alleged negligence, while CrowdStrike argues that Delta’s own IT failures were the primary cause. This controversy raises questions about Delta’s compliance with required security protocols, which the TSA typically enforces for the aviation industry.
The dispute became public after CrowdStrike responded to Delta’s claims, suggesting that its terms of service intrinsically limit the damages owed, should the court rule against it. According to CrowdStrike, the compensation sought by Delta exceeds what their agreements justify, emphasizing that any damages would, at most, double the fees paid for CrowdStrike’s services, much less than the $500 million claimed by Delta.
The case has broader implications for cybersecurity practices in the airline industry, especially following the letter sent by Microsoft’s attorney Brad Cheffo, which advised Delta to preserve evidence of other potential causes of the disruption. The role of companies like IBM, Oracle, and Amazon Web Services in Delta’s IT infrastructure has thus been brought into question. Meanwhile, Delta continues to face a public relations challenge as its operational resilience remains under scrutiny.
For more details on the ongoing legal battle, visit Ars Technica’s report.