When a security update stops the world: The CrowdStrike Falcon outage and the fragility of the digital supply chain

This teaching case examines the global information technology outage of 19 July 2024, when a defective content update to CrowdStrike’s Falcon endpoint security platform crashed approximately 8.5 million Microsoft Windows devices and disrupted airlines, hospitals, banks, broadcasters and emergency services around the world. Unlike most prominent information security cases, no attacker was involved: the incident was caused by the very software organisations had deployed to protect themselves. The case therefore shifts attention from confidentiality-centred views of security towards availability, operational resilience and the governance of digital supply chains. We first discuss the concentration of risk created by modern software supply chains and the trade-offs inherent in security tooling that operates inside the operating system kernel. We then introduce a business model perspective to show how a single quality failure propagated through the value propositions, value chains and revenue models of both the vendor and its customers. Finally, we describe the incident, its technical root causes and its aftermath, including an estimated multi-billion-dollar economic impact, congressional scrutiny, and litigation between Delta Air Lines and CrowdStrike. The case enables students to analyse third-party risk, software deployment practices, crisis response and the regulatory implications of concentrated digital dependence.