A senior executive from cybersecurity firm CrowdStrike issued an apology during a U.S. House of Representatives subcommittee hearing on Tuesday, addressing a faulty software update that triggered a global IT outage in July. Adam Meyers, Senior Vice President for Counter Adversary Operations, acknowledged the significant disruption caused by the update to the Falcon Sensor security software.
“We are deeply sorry this happened and are committed to ensuring it does not happen again,” Meyers stated. He outlined the company’s ongoing review of its systems and the implementation of enhanced content update procedures aimed at strengthening operations following this incident.
Meyers clarified that the outage was neither the result of a cyberattack nor driven by AI. The incident on July 19 led to widespread flight cancellations and affected numerous industries, including banking, healthcare, media, and hospitality, disrupting internet services for approximately 8.5 million Microsoft Windows devices.
Representative Mark Green, chair of the House Homeland Security Committee, described the event as “a catastrophe that we would expect to see in a movie,” emphasizing the gravity of the situation.
Meyers explained that on the day of the outage, new threat detection configurations were incorrectly processed by the Falcon sensor’s rules engine, resulting in malfunctions until the problematic configurations were replaced.
Delta Air Lines announced plans for legal action, attributing the cancellation of 7,000 flights and the impact on 1.3 million passengers to the outage, which cost the airline $500 million. CrowdStrike has disputed Delta’s claims of responsibility.
In the wake of the incident, CrowdStrike has lowered its revenue and profit forecasts, indicating that the business environment will remain challenging for at least another year.
