Law World 415
Provide CrowdStrike’s board with a legal update and risk assessment following the July 2024 outage by summarizing ongoing litigation, reviewing standard customer contracts, and outlining potential exposure to additional customer and shareholder claims.
Available Tools (9 MCP Servers)
calendar_server
List, create, update, and delete calendar events
chat_server
Read and send messages in team chat channels, threads, and reactions
code_execution_server
Execute shell commands in a sandboxed environment with proot isolation
sheets_server
Create, read, and edit Excel spreadsheets (.xlsx) with cell-level operations
filesystem_server
Read, search, and inspect files and directories
mail_server
Send, read, search, reply, and forward email messages
slides_server
Create, read, and edit PowerPoint presentations (.pptx) with slide operations
docs_server
Create, read, and edit Word documents (.docx) with structured operations
World Files
Tasks (11)
A real-time Rapid Response Content (RRC) update is automatically delivered and it causes performance degradation in a customer’s environment. The customer did not stage deployments, had no rollback plan, and used the system in a critical operational setting. Can you review the board memo, along with Crowdstrike's standard and proposed MSA and let me know if CrowdStrike bears the risk for service interruption caused by the RRC? Explain your response and tell me what documents inform your assessment. Write our your findings to me here. Thanks!
Review the following: the statement dated July 19, 2024 from George Kurtz, the Form 8-K from Crowdstrike dated July 19, 2024 and Rule 10b-5. Based solely on these documents, identify any statements made by Kurtz that are clearly and unequivocally misleading under Rule 10b-5. For any problematic statement(s), identify the missing context that is required for them. Reply back to me with your findings as an answer here
Review only the following: CrowdStrike Form 8-K 2024.pdf Form 8-K Standard.pdf DELTA AIR LINES, INC. 8-K.pdf Today, August 9, 2024, we discovered that the Falcon sensor outage may have been caused by a cyberattack. Our cybersecurity firm is processing the data and has advised they will have a conclusive determination in 7 days, but for now, believes that there is a 30% chance that a cyberattack was the underlying cause. Determine if the Company should file a Form 8-K, and if so, what date and under what item the disclosure should be made. Respond back to me here with your findings.
Can you review Sections 8.4, 9.1, 9.3,10.1,14.7 in our MSA, against the below outage scenario? A faulty update causes endpoint failures. The customer sends a breach notice by email to a support inbox, seeks lost revenue and lost data costs and asserts that CrowdStrike must indemnify all losses. For each of the clauses that applies to the facts above, state whether CrowdStrike is liable or not, and provide a one-sentence reason for the conclusion. Put it in a new doc file you create.
We want to get ahead of preparing a settlement agreement for the Delta matter. Can you let me know which of Delta’s original causes of actions are no longer live as we head into the pre-trial conference in March? You can ignore the derivative claims, though I would like to know if punitive fees are likely to apply and whether there is a limit to them based on CrowdStrike’s litigation case file against Delta. And, assuming that IronPeak agrees to insure us during mediation next week, please also estimate our budget as we head into trial. Reply to me back in here with your view.
CrowdStrike sent the attached list of historic stock transactions (note the document lists transactions for both Class A and B stocks). We need to determine if any of these people would be a part of the class in the Plymouth County lawsuit, assuming no opt-outs. Look for the class requirements and the attached list of transactions, identify which individuals from the upload purchased Class A stock, and which of those did so during the Class Period to qualify for the class. Make a new sheet and list their names and each transaction for which the individual qualifies.
We've received the attached warranty claims for some of our products. Please review them. Then, edit the existing existing "product purchases" spreadsheet to show the maximum refund amount a customer could receive for each product purchased.
Analyze whether Counts 1-7 of Delta's Complaint against CrowdStrike fall within the limitation of liability clause in Section 10.1 of CrowdStrike's standard MSA, indicating "Covered" or "Not Covered" for each count. Reply back to me here with your assessments.
MLT is a CrowdStrike customer severely affected by the outage. MLT filed a lawsuit for negligence seeking to recover damages arising from the outage. Additionally, MLT successfully transferred venue to Georgia. CrowdStrike is considering moving for summary judgment on the basis that the outage does not rise to the level of gross negligence and the exculpatory clause in the contract applies (the "Motion"). Can you tell me if CrowdStrike is likely to succeed in its Motion? Reply to me with your view, giving me a Yes or No and a short explanation.
CrowdStrike's general counsel sent us a complaint filed in U.S. district court by Larry Stone, alleging violations under Sections 10(b) and 20(a) of the Securities Exchange Act of 1934, as well as Rule 10b-5 arising from false statements or omissions regarding its Falcon Sensor, the update of which causing the widely-reported July, 2024 service outage, leading to his Class A stock suffering a considerable loss in value. Review our directories and the attached file for analysis and reply back to me with a short memo in a new dox file. Determine whether the Plymouth matter's class, which is pending certification and does not show a related opt out, is likely to support a successful motion to dismiss Stone's suit.
An independent investigation of Crowdstrike's Channel File 291 outage revealed that the devices affected were mostly Microsoft or Google devices, and no Apple devices were affected at all. Is another filing with the SEC required at this time? Please give me a yes/no with a clear explanation back here so I can understand your answer and what the legal basis is for your assessment.