On July 19, 2024, the Company released a content configuration update for its Falcon sensor that resulted in system crashes for certain Windows systems (the “Channel File 291 Incident”). The Company is subject to a number of legal proceedings in connection with the Channel File 291 Incident, including:

•On July 30, 2024, a putative class action lawsuit was filed against the Company and certain of the Company’s officers in federal court in the Western District of Texas alleging violations of federal securities laws, including that the defendants made false or misleading statements. The complainants seek certification of a class of all persons who purchased or otherwise acquired the Company’s securities during specified periods of time and are seeking unspecified monetary damages, costs and attorneys’ fees.

•On August 5, 2024, a putative class action lawsuit was filed against the Company in federal court in the Western District of Texas alleging, among other things, negligence and violations of the California Unfair Competition Law. The complainants seek certification of a nationwide class, as well as sub-classes of certain California, Ohio, and Pennsylvania citizens, who had a flight delayed or canceled during a specified period of time and are seeking unspecified monetary damages, certain injunctive relief, costs and attorneys’ fees.

•On August 19, 2024, a putative class action lawsuit was filed against the Company in federal court in the Western District of Texas alleging, among other things, negligence in the design and testing of the Falcon sensor and tortious interference between certain airline customers and their airline. The complainants seek certification of a nationwide class (or alternatively a class of Iowa citizens) who had a flight delayed or canceled on a specified airline during a specific period of time and are seeking unspecified monetary damages, costs and attorneys’ fees.

Additionally, some customers and third parties have asserted claims or publicly threatened litigation against the Company, such as Delta Air Lines. The Company has also received inquiries from governmental authorities and other third parties related to the Channel File 291 Incident. The Company is cooperating and providing information in connection with these inquiries.

For any claims and legal proceedings for which the Company believes a liability is both probable and reasonably estimable, the Company records a liability in the period for which it makes this determination. For claims and legal proceedings where a loss may be reasonably possible, but not probable, or is probable but not reasonably estimable, no accrual is established. While the Company believes it is reasonably possible that it could incur losses associated with the claims, proceedings and inquiries described above, it is not possible to estimate the amount of any loss or range of possible loss that might result from adverse judgments, settlements, penalties or other resolutions of these claims, proceedings and inquiries based on their early stage, and the lack of resolution on significant factual and legal issues. Because the final outcome of any of these matters cannot be predicted with certainty, unfavorable or unexpected developments or outcomes could result in a material impact to the Company’s results of operations.

The Company expects to incur significant legal and professional services and other expenses associated with the Channel File 291 Incident in future periods. These expenses will be recognized as incurred. Certain costs may be recoverable under the Company’s insurance policies in effect at the date of the Channel File 291 Incident. Any amounts recoverable under such policies will be reflected in future periods in which recovery is considered probable.

In March 2022, Webroot, Inc. and Open Text, Inc. (collectively, “Webroot”) filed a lawsuit against the Company and CrowdStrike, Inc. in federal court in the Western District of Texas alleging that certain of the Company’s products infringe six patents held by them. In the complaint, Webroot sought unspecified damages, attorneys’ fees and a permanent injunction. In May 2022, CrowdStrike, Inc. asserted counterclaims alleging that certain of Webroot’s products infringe two of its patents. In the filing, CrowdStrike, Inc. sought unspecified damages, reasonable fees and costs, and a permanent injunction. In September 2022, Webroot amended its complaint to assert six additional patents. In November 2023, CrowdStrike, Inc. entered into an agreement that provided for, among other things, the settlement and dismissal of the parties’ claims and filed for dismissal. The amount attributable to the settlement was not material.

In addition, the Company is involved in various other legal proceedings and subject to claims that arise in the ordinary course of business. For any claims for which the Company believes a liability is both probable and reasonably estimable, the Company records a liability in the period for which it makes this determination. Other than as discussed above, there is no pending or threatened legal proceeding to which the Company is a party that, in the Company’s opinion, is reasonably possible to have a material effect on its condensed consolidated financial statements; however, the results of litigation and claims are inherently unpredictable. Regardless of the outcome, litigation can have an adverse impact on the Company’s business because of defense and settlement costs, diversion of management resources, and other factors. In addition, the costs of litigation and the timing of these costs from period to period are difficult to estimate, subject to change and could adversely affect the Company’s condensed consolidated financial statements.

In the normal course of business, the Company enters into non-cancellable purchase commitments with various parties to purchase products and services such as data center capacity, advertising, technology, equipment, office renovations, corporate events, and consulting services. A summary of non-cancellable purchase obligations in excess of one year as of July 31, 2024, with expected date of payment is as follows (in thousands):

The Company’s cloud computing services are typically warranted to perform in a manner consistent with general industry standards that are reasonably applicable and materially in accordance with the Company’s online help documentation under normal use and circumstances. In addition, for its Falcon Complete customers, the Company offers a limited warranty, subject to certain conditions, to cover certain costs incurred by the customer in case of a cybersecurity breach. The Company has entered into an insurance policy to reduce its potential liability arising from such limited warranty arrangements. The Company’s customer arrangements generally include certain provisions for indemnifying customers against losses suffered or incurred as a result of third-party claims that the Company’s products or services infringe a third party’s intellectual property rights. From time to time, the Company has also agreed to certain other indemnifications and warranties. The Company has not incurred any material costs because of such obligations and has not accrued any liabilities related to such obligations in the condensed consolidated financial statements as of July 31, 2024 or January 31, 2024.

The Company has also agreed to indemnify its directors and certain executive officers for costs associated with any fees, expenses, judgments, fines and settlement amounts incurred by any of these persons in any action or proceeding to which any of those persons is, or is threatened to be, made a party by reason of the person’s service as a director or officer, including any action by the Company, arising out of that person’s services as the Company’s director or officer or that person’s services provided to any other company or enterprise at the Company’s request. The Company maintains director and officer insurance coverage that would generally enable the Company to recover a portion of any future amounts paid. The Company may also be subject to indemnification obligations by law with respect to the actions of its employees under certain circumstances and in certain jurisdictions. No liabilities have been accrued associated with this indemnification provision as of July 31, 2024 or January 31, 2024.