Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
A federal judge dismissed the principal investor securities class action over CrowdStrike’s July 19, 2024 outage, and the case is now closed. Judge Robert Pitman ruled on January 12, 2026 that shareholders had not adequately pleaded actionable false or misleading statements or the intent to defraud investors, known as scienter. Plaintiffs declined to amend, final judgment was entered on January 28, and CrowdStrike says no timely appeal was filed.
The decision is a major win in CrowdStrike’s securities litigation, but it is not a ruling that the outage caused no harm or that every related lawsuit has ended.
What lawsuit was dismissed?
The case was In re CrowdStrike Holdings, Inc. Securities Litigation, No. 1:24-cv-00857, in the U.S. District Court for the Western District of Texas. Thomas P. DiNapoli, New York’s comptroller, sued on behalf of the New York State and Local Retirement System and the New York State Common Retirement Fund. CrowdStrike Holdings and executives George Kurtz, Burt Podbere and Michael Sentonas were defendants. The case record is available through GovInfo.
The putative class action asserted federal securities-fraud claims, principally under Section 10(b) of the Securities Exchange Act and SEC Rule 10b-5. Investors alleged that they bought CrowdStrike securities at artificially inflated prices because the company misrepresented software testing, quality controls, update safeguards and product reliability, while failing to disclose risks exposed by the outage. Those were allegations, not findings that the court accepted as proven.
What triggered the claims?
On July 19, 2024, a content-configuration update for CrowdStrike’s Falcon sensor caused crashes on certain Windows systems. The incident disrupted airlines, banks, broadcasters, hospitals and other organizations worldwide. CrowdStrike’s fiscal 2026 Form 10-K describes the update and resulting Windows crashes.
CrowdStrike and outside reporting have put the number of affected Windows computers at more than 8 million (sometimes approximately 8.5 million), while one external estimate placed economic losses at about $5.4 billion. Those are estimates, not amounts determined in the securities case. The outage’s scale supplied the factual backdrop; the legal question was whether earlier investor-facing statements were actionable securities misrepresentations.
Rank #2
- DEVICE SECURITY - Award-winning McAfee antivirus, real-time threat protection, protects your data, phones, laptops, and tablets
- SCAM DETECTOR - We'll automatically identify risky texts, emails, and videos that attempt to steal your personal or financial information. You can even use our mobile app to check social messages and QR codes for scams on-demand, without missing a beat.
- SECURE VPN – Secure and private browsing, unlimited VPN, privacy on public Wi-Fi, protects your personal info, fast and reliable connections
- IDENTITY MONITORING – 24/7 monitoring and alerts, monitors the dark web, scans up to 60 types of personal and financial info
- SAFE BROWSING – Guides you away from risky links, blocks phishing and risky sites, protects your devices from malware
Why did the judge dismiss it?
The court’s ruling addressed the adequacy of the complaint, not whether the outage occurred or whether CrowdStrike’s engineering process was flawless. The judge concluded that:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
- The cited statements were not adequately shown to be false or misleading in context. The plaintiffs, according to reported coverage, treated statements about CrowdStrike’s products and controls too selectively rather than reading them as a whole.
- Scienter was not adequately pleaded. Securities plaintiffs must allege facts supporting a strong inference that defendants acted with intent to deceive, manipulate or defraud investors. The court found the complaint did not meet that standard.
In practical terms, the plaintiffs did not plead a legally sufficient securities-fraud claim. That is narrower than a finding that all criticism of CrowdStrike’s update process was baseless, that no customer suffered losses, or that executives could never face other forms of liability.
Rank #3
- Mastering Microsoft Endpoint Manager: Deploy and manage Windows 10, Windows 11, and Windows 365 on both physical and cloud PCs
- ABIS BOOK
- Packt Publishing
How the case became final
| Date | Procedural event |
|---|---|
| July 30, 2024 | Initial securities class action filed. |
| January 21, 2025 | Amended complaint filed. |
| April 7, 2025 | Defendants filed their motion to dismiss. |
| January 12, 2026 | The court granted the motion to dismiss. |
| January 26, 2026 | Plaintiffs filed notice that they would not amend. |
| January 28, 2026 | Final judgment was entered and the case was closed. |
CrowdStrike’s fiscal 2026 Form 10-K says the plaintiffs did not file a notice of appeal within the permitted period. That filing is the basis for describing the judgment as final; it is more precise than saying every possible legal issue arising from the outage is over.
What litigation remains?
Delta Air Lines
Delta sued CrowdStrike in Georgia over alleged losses from the outage. Its claims include computer trespass, trespass to personalty, breach of contract, intentional misrepresentation or fraud by omission, strict-liability product defect, gross negligence and deceptive or unfair business practices. CrowdStrike reported that its motion to dismiss was granted in part and denied in part on May 16, 2025, with discovery continuing.
Delta has described losses exceeding $500 million, including an allegation that it canceled about 5,000 flights and manually reset roughly 40,000 servers. Those figures are Delta’s claims or reported estimates, not adjudicated damages. The securities ruling does not decide Delta’s contract, tort or product-liability theories.
Passenger class action
A passenger lawsuit concerning flight disruptions was dismissed by the district court on June 18, 2025, with final judgment entered. The plaintiffs filed a notice of appeal on June 25, 2025; CrowdStrike’s filing described that appeal as pending. This is separate from the investor class action.
Derivative litigation
CrowdStrike also disclosed derivative suits against officers and directors alleging breach of fiduciary duty, unjust enrichment and federal securities-law violations. Some matters were consolidated and stayed while the securities case was pending. Their status should not be inferred from the closure of the investor action.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What the dismissal means for investors and customers
- For shareholders: the principal class action seeking securities-law relief has been dismissed and closed, reducing CrowdStrike’s exposure to that particular theory.
- For customers: the decision does not resolve contractual allocation of outage risk, negligence allegations, indemnity disputes or claims for operational losses.
- For everyone assessing the incident: a pleading-stage dismissal is not an engineering audit. It says the complaint did not adequately allege falsity, material misleadingness and scienter under securities law.
The cleanest summary is therefore limited: CrowdStrike defeated the investor securities class action, but the legal consequences of the July 19 outage were not eliminated across the board.
Frequently Asked Questions
Did the court find that CrowdStrike did nothing wrong?
No. The court found that the complaint did not adequately plead actionable securities fraud. It did not decide every engineering, contractual, negligence or operational question arising from the outage.
Free tools Windows power users keep installed
One-click scans. No signup required.
Is the CrowdStrike investor case completely over?
The class action was closed after plaintiffs declined to amend, final judgment was entered on January 28, 2026, and CrowdStrike reported that no timely appeal was filed. Other outage-related cases remain distinct.
What is the status of Delta’s lawsuit against CrowdStrike?
CrowdStrike reported that its motion to dismiss was granted in part and denied in part on May 16, 2025, with discovery ongoing. Delta’s separate claims were not resolved by the securities ruling.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
