On July 19, 2024, the Company released a content configuration update for its Falcon sensor that resulted in system crashes for certain Windows systems (the “July 19 Incident”). The Company is subject to a number of legal proceedings in connection with the July 19 Incident, including:

•On July 30, 2024, a putative class action lawsuit was filed against the Company and certain of the Company’s officers in federal court in the Western District of Texas alleging violations of federal securities laws, including that the defendants made false or misleading statements. The complainants seek certification of a class of all persons who purchased or otherwise acquired the Company’s securities during specified periods of time and are seeking unspecified monetary damages, costs and attorneys’ fees.

•On August 5, 2024, a putative class action lawsuit was filed against CrowdStrike, Inc. in federal court in the Western District of Texas alleging, among other things, negligence and violations of the California Unfair Competition Law. The complainants seek certification of a nationwide class, as well as sub-classes of certain California, Ohio, and Pennsylvania citizens, who had a flight delayed or canceled during a specified period of time and are seeking unspecified monetary damages, certain injunctive relief, costs and attorneys’ fees. On November 6, 2024, this lawsuit was consolidated with the August 19, 2024 lawsuit described below, and interim class counsel was appointed. A consolidated complaint is required to be filed within 30 days of the consolidation order.

•On August 19, 2024, a putative class action lawsuit was filed against the Company and CrowdStrike, Inc. in federal court in the Western District of Texas alleging, among other things, negligence in the design and testing of the Falcon sensor and tortious interference between certain airline customers and their airline. The complainants seek certification of a nationwide class (or alternatively a class of Iowa citizens) who had a flight delayed or canceled on a specified airline during a specific period of time and are seeking unspecified monetary damages, costs and attorneys’ fees. On November 6, 2024, this lawsuit was consolidated with the lawsuit filed on August 5, 2024 described above and was administratively closed.

•On September 4, September 11, and September 20, 2024, three derivative lawsuits were filed against certain of the Company’s officers and directors, and against the Company as nominal defendant, in federal court in the Western District of Texas alleging breach of fiduciary duty under Delaware law and violations of federal securities laws, including that the defendants made false or misleading statements in violation of Sections 10(b) and 14(a) of the Exchange Act and SEC Rules 10b-5 and 14a-9. One of the lawsuits also brings a claim against certain of the defendants for contribution under Sections 10(b) and 21D of the Exchange Act. The complainants seek monetary and non-monetary relief purportedly on behalf of the Company.

•On October 25, 2024, Delta Airlines, Inc. (“Delta”) filed a complaint against CrowdStrike, Inc. in the Superior Court for Fulton County, Georgia, alleging, among other things, computer trespass, trespass to personalty, breach of contract, intentional misrepresentation/fraud by omission, strict-liability product defect, gross negligence, and deceptive and unfair business practices. Delta is seeking unspecified monetary damages, attorneys’ fees and unspecified punitive damages. On November 22, 2024, CrowdStrike, Inc. filed an unopposed motion to transfer the case to the Metro Atlanta Business Case Division.

Additionally, some customers and third parties have asserted claims or publicly threatened litigation against the Company. The Company has also received inquiries from governmental authorities and other third parties related to the July 19 Incident. The Company is cooperating and providing information in connection with these inquiries.

For any claims and legal proceedings for which the Company believes a liability is both probable and reasonably estimable, the Company records a liability in the period for which it makes this determination. For claims and legal proceedings where a loss may be reasonably possible, but not probable, or is probable but not reasonably estimable, no accrual is established. While the Company believes it is reasonably possible that it could incur losses associated with the claims, proceedings and inquiries described above, it is not possible to estimate the amount of any loss or range of possible loss that might result from adverse judgments, settlements, penalties or other resolutions of these claims, proceedings and inquiries based on their early stage, and the lack of resolution on significant factual and legal issues. Because the final outcome of any of these matters cannot be predicted with certainty, unfavorable or unexpected developments or outcomes could result in a material impact to the Company’s results of operations.

The Company expects to incur significant legal and professional services and other expenses associated with the July 19 Incident in future periods. These expenses will be recognized as incurred. Certain costs may be recoverable under the Company’s insurance policies in effect at the date of the July 19 Incident. Any amounts recoverable under such policies will be reflected in future periods in which recovery is considered probable.

(1) These expenses were included in the Company’s condensed consolidated statements of operations as sales and marketing expenses, research and development expenses, and general and administrative expenses. Accruals were recorded in accrued expenses in the Company’s condensed consolidated balance sheets. Insurance receivable was recorded in prepaid expenses and other current assets in the Company's condensed consolidated balance sheets.

In March 2022, Webroot, Inc. and Open Text, Inc. (collectively, “Webroot”) filed a lawsuit against the Company and CrowdStrike, Inc. in federal court in the Western District of Texas alleging that certain of the Company’s products infringe six patents held by them. In the complaint, Webroot sought unspecified damages, attorneys’ fees and a permanent injunction. In May 2022, CrowdStrike, Inc. asserted counterclaims alleging that certain of Webroot’s products infringe two of its patents. In the filing, CrowdStrike, Inc. sought unspecified damages, reasonable fees and costs, and a permanent injunction. In September 2022, Webroot amended its complaint to assert six additional patents. In November 2023, CrowdStrike, Inc. entered into an agreement that provided for, among other things, the settlement and dismissal of the parties’ claims and filed for dismissal. The amount attributable to the settlement was not material.

In addition, the Company is involved in various other legal proceedings and subject to claims that arise in the ordinary course of business. For any claims for which the Company believes a liability is both probable and reasonably estimable, the Company records a liability in the period for which it makes this determination. Other than as discussed above, there is no pending or threatened legal proceeding to which the Company is a party that, in the Company’s opinion, is reasonably possible to have a material effect on its condensed consolidated financial statements; however, the results of litigation and claims are inherently unpredictable. Regardless of the outcome, litigation can have an adverse impact on the Company’s business because of defense and settlement costs, diversion of management resources, and other factors. In addition, the costs of litigation and the timing of these costs from period to period are difficult to estimate, subject to change and could adversely affect the Company’s condensed consolidated financial statements.

In the normal course of business, the Company enters into non-cancellable purchase commitments with various parties to purchase products and services such as data center capacity, advertising, technology, equipment, office renovations, corporate events, and consulting services. A summary of non-cancellable purchase obligations in excess of one year as of October 31, 2024, with expected date of payment is as follows (in thousands):

The Company provides financing arrangements for certain qualified end-users to purchase its products and services. When the Company enters into these financing arrangements with the end-users, the funds provided by the Company for the sales transactions do not always occur immediately upon signing, depending on the terms of the arrangements. The Company estimates an allowance for credit losses on these off-balance sheet credit exposures at each reporting period on the contractual period over which the Company is exposed to credit risk via a contractual obligation to extend credit, unless that obligation is unconditionally cancellable by the Company. As of October 31, 2024, the Company had non-cancellable unfunded commitments totaling approximately $49.3 million.

The Company’s cloud computing services are typically warranted to perform in a manner consistent with general industry standards that are reasonably applicable and materially in accordance with the Company’s online help documentation under normal use and circumstances. In addition, for its Falcon Complete customers, the Company offers a limited warranty, subject to certain conditions, to cover certain costs incurred by the customer in case of a cybersecurity breach. The Company has entered into an insurance policy to reduce its potential liability arising from such limited warranty arrangements. The Company’s customer arrangements generally include certain provisions for indemnifying customers against losses suffered or incurred as a result of third-party claims that the Company’s products or services infringe a third party’s intellectual property rights. From time to time, the Company has also agreed to certain other indemnifications and warranties. The Company has not incurred any material costs because of such obligations and has not accrued any liabilities related to such obligations in the condensed consolidated financial statements as of October 31, 2024 or January 31, 2024.

The Company has also agreed to indemnify its directors and certain executive officers for costs associated with any fees, expenses, judgments, fines and settlement amounts incurred by any of these persons in any action or proceeding to which any of those persons is, or is threatened to be, made a party by reason of the person’s service as a director or officer, including any action by the Company, arising out of that person’s services as the Company’s director or officer or that person’s services provided to any other company or enterprise at the Company’s request. The Company maintains director and officer insurance coverage that would generally enable the Company to recover a portion of any future amounts paid. The Company may also be subject to indemnification obligations by law with respect to the actions of its employees under certain circumstances and in certain jurisdictions. No liabilities have been accrued associated with this indemnification provision as of October 31, 2024 or January 31, 2024.