if CrowdStrike isn't to blame, then who is?
Sandbox rules simply don’t apply when real money is at stake— the contracts that sit behind these relationships are all that matters + a companies ability to stop doing business with one another.
Delta probably isn’t even entitied to a pro-rated refund of their prepaid CrowdStrike subscription. If Delta has a multi-year deal contract with CrowdStrike, Delta most likely have to keep paying CS for some time In the future.
CrowdStrike breached but almost certainly cured within allowable period.
Maybe they sue for gross negligence which I think may circumvent contractual liability limits in certain situations.
If push comes to shove, Delta can sue and/or stop using the product.
This is ultimately a question of contracts, liability limits— particularly if Delta secured consequential damages.
SaaS contracts are designed to defaulted to NOT allow a customer to pursue consequential damages remedies.
https://en.m.wikipedia.org/wiki/Consequential_damages
This is a question of CrowdStrike’s Deal Desk contracting hygiene.
Deal Desks are the joint finance-legal-sales teams that work on enterprise contracts in scaled enterprise SaaS startups.
This is a SaaS CFOs nightmare.
https://www.npr.org/2010/09/24/130104047/who-decides-the-pri...
Existing HN titling: “Tesla ordered to recall almost 4k Cybertrucks over faulty accelerator” should probably be adjusted.