Editing CrowdStrike

{{pp|small=yes}}
{{current related||2024 CrowdStrike incident|date=July 2024}}
{{short description|American cybersecurity technology company}}
{{Use American English|date=July 2020}}
{{Use dmy dates|date=June 2016}}
{{Infobox company
| name = CrowdStrike Holdings, Inc.
| logo = CrowdStrike logo.svg
| type = [[Public company|Public]]
| traded_as = {{ubl|class=nowrap|{{NASDAQ|CRWD}} (Class A)|[[Nasdaq-100]] component|[[S&P 500]] component}}
| founded = {{Start date and age|2011}}
| founders = {{ubl|[[George Kurtz]]|[[Dmitri Alperovitch]]|Gregg Marston}}
| industry = [[Information security]]
| hq_location_city = [[Austin, Texas]]
| hq_location_country = United States
| key_people = {{ubl|George Kurtz ([[Chief executive officer|CEO]])|Michael Sentonas (President)<ref name="afr-sentonas-pres-21-mar-2024">{{cite news |last1=Richardson |first1=Tom |title=CrowdStrike’s Australian boss snares $225m cybersecurity fortune |url=https://www.afr.com/markets/equity-markets/crowdstrike-s-australian-boss-snares-225m-cybersecurity-fortune-20240326-p5ff9c |access-date=21 July 2024 |work=Australian Financial Review |date=31 March 2024 |language=en}}</ref>}}
| num_employees = 7,925
| num_employees_year = FY24
| revenue = {{increase}} {{US$|3.06 billion|link=yes}}
| revenue_year = FY24
| operating_income = {{increasenegative}} US$−2 million
| income_year = FY24
| net_income = {{increase}} US$89.3 million
| net_income_year = FY24
| assets = {{increase}} US$6.65 billion
| assets_year = FY24
| equity = {{increase}} US$2.30 billion
| equity_year = FY24
| website = {{Official URL}}
| footnotes = Financials {{as of|2024|1|31|df=US|pre=fiscal year ended|lc=y}}.<br />References:<ref name=10K>{{cite web |title=US SEC: Form 10-K Crowdstrike Holdings, Inc. |url=https://www.sec.gov/ix?doc=/Archives/edgar/data/1535527/000153552724000007/crwd-20240131.htm |publisher=[[U.S. Securities and Exchange Commission]] |date=March 7, 2024}}</ref>
}}
'''CrowdStrike Holdings, Inc.''' is an American [[computer security|cybersecurity]] technology company based in [[Austin, Texas]]. It provides [[endpoint security]], [[Threat Intelligence Platform|threat intelligence]], and [[cyberattack]] response services.<ref>{{cite web|url=http://www.techrepublic.com/article/crowdstrikes-security-software-targets-bad-guys-not-their-malware/|title=CrowdStrike's security software targets bad guys, not their malware|date=9 October 2015 |publisher=[[TechRepublic]]|access-date=10 June 2016|archive-date=2 June 2016|archive-url=https://web.archive.org/web/20160602141536/http://www.techrepublic.com/article/crowdstrikes-security-software-targets-bad-guys-not-their-malware/|url-status=live}}</ref>

The company has been involved in investigations of several high-profile cyberattacks, including the 2014 [[Sony Pictures hack]], the 2015–16 [[DNC cyber attacks|cyberattacks on the Democratic National Committee]] (DNC), and the 2016 [[2016 Democratic National Committee email leak|email leak involving the DNC]].<ref>{{cite web| url=http://www.csoonline.com/article/2880095/cyber-attacks-espionage/crowdstrike-demonstrates-how-attackers-wiped-the-data-from-the-machines-at-sony.html| title=CrowdStrike demonstrates how attackers wiped the data from the machines at Sony| date=2015| access-date=2016-06-09| publisher=[[International Data Group]]| archive-date=20 August 2016| archive-url=https://web.archive.org/web/20160820201015/http://www.csoonline.com/article/2880095/cyber-attacks-espionage/crowdstrike-demonstrates-how-attackers-wiped-the-data-from-the-machines-at-sony.html| url-status=live}}</ref><ref>{{cite news |first1=Tom|last1=Hamburger |first2=Ellen |last2=Nakashima |title=Clinton campaign – and some cyber experts – say Russia is behind email release |newspaper=[[The Washington Post]] |date=July 24, 2016 |url=https://www.washingtonpost.com/politics/clinton-campaign--and-some-cyber-experts--say-russia-is-behind-email-release/2016/07/24/5b5428e6-51a8-11e6-bbf5-957ad17b4385_story.html }}</ref> In July 2024, a faulty update to its security software caused [[2024 CrowdStrike incident|global computer outages]] that disrupted air travel, banking, broadcasting, and other services.<ref name="banfield-nwachi-2024">{{cite news | last1 = Banfield-Nwachi | first1 = Mabel | title = Windows global IT outage: what we know so far
 | date = 19 July 2024 | work = The Guardian | location = London, United Kingdom | issn = 0261-3077 | url = https://www.theguardian.com/technology/article/2024/jul/19/windows-global-it-outage-what-we-know-so-far | access-date = 2024-07-19}}</ref><ref>{{Cite web |date=2024-07-19 |title=Crowdstrike and Microsoft: What we know about global IT outage |url=https://www.bbc.com/news/articles/cp4wnrxqlewo |access-date=2024-07-19 |website=BBC News |language=en-GB|first=Robert|last=Plummer}}</ref><ref>{{Cite web |last=Godfrey |first=Paul |last2=Druker |first2=Simon |last3=Wynder |first3=Ehren |date=2024-07-19 |title=911 call centers back online after IT outage causes global chaos  |url=https://www.upi.com/Top_News/World-News/2024/07/19/IT-failure-hits-causes-chaos-around-world/2531721376791 |access-date=2024-07-19 |website=United Press International |language=en}}</ref>

==History==
===Founding: 2011–2019===
CrowdStrike was co-founded in 2011 by [[George Kurtz]] (CEO), [[Dmitri Alperovitch]] (former CTO), and Gregg Marston (CFO, retired).<ref>{{Cite web|url=https://fortune.com/2015/07/29/crowdstrike-cybersecurity-george-kurtz/|title=In conversation with George Kurtz, CEO of CrowdStrike|website=Fortune|language=en|access-date=2019-07-01|archive-date=1 July 2019|archive-url=https://web.archive.org/web/20190701225427/https://fortune.com/2015/07/29/crowdstrike-cybersecurity-george-kurtz/|url-status=live}}</ref><ref>{{Cite web|url=https://www.bloomberg.com/profile/person/17185150?sref=eMecddu3|title=Bloomberg – Dmitri Alperovitch|website=www.bloomberg.com|access-date=2020-02-14|archive-date=14 July 2020|archive-url=https://web.archive.org/web/20200714191756/https://www.bloomberg.com/profile/person/17185150?sref=eMecddu3|url-status=live}}</ref><ref>{{cite news|url=http://fortune.com/2015/07/29/crowdstrike-cybersecurity-george-kurtz/|title=Standing up at the gates of hell: CrowdStrike CEO George Kurtz|date=29 July 2015|work=[[Fortune (magazine)|Fortune]]|access-date=10 June 2016|archive-date=29 May 2016|archive-url=https://web.archive.org/web/20160529191620/http://fortune.com/2015/07/29/crowdstrike-cybersecurity-george-kurtz/|url-status=live}}</ref><ref>{{Cite web|url=https://www.inc.com/cameron-albert-deitch/crowdstrike-cybersecurity-unicorn-ipo.html|title=CrowdStrike, the $3.4 Billion Startup That Fought Russian Spies in 2016, Just Filed for an IPO|last=Albert-Deitch|first=Cameron|date=2019-05-15|website=Inc.com|access-date=2019-07-01|archive-date=3 June 2019|archive-url=https://web.archive.org/web/20190603200440/https://www.inc.com/cameron-albert-deitch/crowdstrike-cybersecurity-unicorn-ipo.html|url-status=live}}</ref> The following year, they hired Shawn Henry, a former [[Federal Bureau of Investigation]] (FBI) official, to lead the subsidiary CrowdStrike Services, Inc., which offered security and response services.<ref>{{cite web |last1=Ragan |first1=Steve |title=Former FBI Exec to Head CrowdStrike Services |url=https://www.securityweek.com/former-fbi-exec-head-crowdstrike-services |access-date=13 December 2020 |work=SecurityWeek |date=23 April 2012}}</ref><ref>{{cite web|url=https://www.networkworld.com/article/708534/malware-cybercrime-top-fbi-cyber-cop-joins-startup-crowdstrike-to-fight-enterprise-intrusions.html|title=Top FBI cyber cop joins startup CrowdStrike to fight enterprise intrusions|first=Ellen|last=Messmer|date=18 April 2012 |publisher=[[International Data Group#IDG Global Brands|Network World]]|access-date=10 June 2016|archive-date=8 March 2024|archive-url=https://web.archive.org/web/20240308153855/https://www.networkworld.com/article/708534/malware-cybercrime-top-fbi-cyber-cop-joins-startup-crowdstrike-to-fight-enterprise-intrusions.html|url-status=live}}</ref> The company launched CrowdStrike Falcon, an [[antivirus]] package, as its first product in June 2013.<ref>{{Cite web|url=https://www.networkworld.com/article/2168251/start-up-tackles-advanced-persistent-threats-on-microsoft--apple-computers.html|title=Start-up tackles advanced persistent threats on Microsoft, Apple computers|last=Messmer|first=Ellen|date=2013-06-18|website=Network World|language=en|access-date=2019-07-01|archive-date=17 May 2019|archive-url=https://web.archive.org/web/20190517002912/https://www.networkworld.com/article/2168251/start-up-tackles-advanced-persistent-threats-on-microsoft--apple-computers.html|url-status=live}}</ref><ref>{{Cite news|url=https://www.reuters.com/assets/print?aid=USKBN0N41PT20150413|title=U.S. firm CrowdStrike claims success in deterring Chinese hackers|date=2015-04-13|newspaper=Reuters|access-date=2016-06-14|archive-date=12 November 2017|archive-url=https://web.archive.org/web/20171112131754/https://www.reuters.com/assets/print?aid=USKBN0N41PT20150413|url-status=live}}</ref>

In May 2014, CrowdStrike's reports helped the [[United States Department of Justice]] to charge five [[Cyberwarfare by China|Chinese military hackers]] with economic [[cyber espionage]] against U.S. corporations.<ref>{{Cite news|last=Gorman|first=Devlin Barrett and Siobhan|url=https://www.wsj.com/articles/u-s-justice-department-to-charge-chinese-army-workers-hacked-u-s-firms-1400499708|title=U.S. Charges Five in Chinese Army With Hacking|date=2014-05-20|work=Wall Street Journal|access-date=2020-02-14|language=en-US|issn=0099-9660|archive-date=15 February 2020|archive-url=https://web.archive.org/web/20200215052007/https://www.wsj.com/articles/u-s-justice-department-to-charge-chinese-army-workers-hacked-u-s-firms-1400499708|url-status=live}}</ref> CrowdStrike also uncovered the activities of [[Energetic Bear]], a group connected to [[Russian Federation|Russia]]'s [[Federal Security Service]] that conducted intelligence operations against global targets, primarily in the energy sector.<ref>{{Cite web|url=https://www.cyberscoop.com/us-nuclear-hack-russia-energetic-bear-fireeye-phishing-watering-hole/|title=The old foe, new attack and unsolved mystery in the recent U.S. energy sector hacking campaign|date=2017-07-12|website=CyberScoop|language=en|access-date=2020-02-14|archive-date=24 September 2019|archive-url=https://web.archive.org/web/20190924072304/https://www.cyberscoop.com/us-nuclear-hack-russia-energetic-bear-fireeye-phishing-watering-hole/|url-status=live}}</ref>

After the [[Sony Pictures hack]], CrowdStrike uncovered evidence implicating the government of [[North Korea]] and demonstrated how the attack was carried out.<ref>{{Cite web|url=http://www.pcworld.com/article/2885592/whats-in-a-typo-more-evidence-tying-north-korea-to-the-sony-hack.html|title=What's in a typo? More evidence tying North Korea to the Sony hack|website=PCWorld|access-date=2016-06-14|archive-date=19 August 2016|archive-url=https://web.archive.org/web/20160819051957/http://www.pcworld.com/article/2885592/whats-in-a-typo-more-evidence-tying-north-korea-to-the-sony-hack.html|url-status=live}}</ref> In 2014, CrowdStrike helped identify members of Putter Panda, the state-sponsored Chinese group of hackers also known as [[PLA Unit 61486]].<ref>{{Cite news|url=https://www.nytimes.com/2014/06/10/technology/private-report-further-details-chinese-cyberattacks.html?pagewanted=print|title=2nd China Army Unit Implicated in Online Spying|last=Perlroth|first=Nicole|date=2014-06-09|newspaper=The New York Times|access-date=2016-06-14|issn=0362-4331|archive-date=12 November 2017|archive-url=https://web.archive.org/web/20171112074612/https://www.nytimes.com/2014/06/10/technology/private-report-further-details-chinese-cyberattacks.html?pagewanted=print|url-status=live}}</ref><ref>{{Cite news|url=http://www.ft.com/intl/cms/s/0/3a1652ce-f027-11e3-9b4c-00144feabdc0.html|title=Second China unit accued of cyber crime|date=June 10, 2014|work=Financial Times|access-date=June 10, 2014}}</ref>

In May 2015, the company released information about [[VENOM]], a critical flaw in an open-source [[hypervisor]] called [[QEMU|Quick Emulator (QEMU)]] that allowed attackers to access sensitive personal information.<ref>{{Cite web|url=http://fortune.com/2015/05/13/venom-vulnerability/|title='Venom' vulnerability: Serious computer bug shatters cloud security|date=2015-05-13|website=Fortune|access-date=2016-06-14|archive-date=25 April 2016|archive-url=https://web.archive.org/web/20160425105322/http://fortune.com/2015/05/13/venom-vulnerability/|url-status=live}}</ref><ref>{{Cite web|url=https://arstechnica.com/information-technology/2015/05/extremely-serious-virtual-machine-bug-threatens-cloud-providers-everywhere/|title=Extremely serious virtual machine bug threatens cloud providers everywhere|last=Goodin|first=Dan|date=2015-05-13|website=Ars Technica|language=en-us|access-date=2019-07-01|archive-date=22 June 2019|archive-url=https://web.archive.org/web/20190622131725/https://arstechnica.com/information-technology/2015/05/extremely-serious-virtual-machine-bug-threatens-cloud-providers-everywhere/|url-status=live}}</ref> In October 2015, CrowdStrike announced that it had identified Chinese hackers attacking technology and pharmaceutical companies around the time that [[President of the United States|U.S. President]] [[Barack Obama]] and China's leader [[Xi Jinping]] publicly agreed not to conduct [[Chinese espionage in the United States|economic espionage against each other]]. The alleged hacking would have been in violation of that agreement.<ref>{{Cite news|url=https://www.wsj.com/articles/report-warns-of-chinese-hacking-1445227440|title=Report Warns of Chinese Hacking|last=Yadron|first=Danny|newspaper=Wall Street Journal|date=19 October 2015 |language=en-US|access-date=2019-07-01|archive-date=17 May 2019|archive-url=https://web.archive.org/web/20190517002912/https://www.wsj.com/articles/report-warns-of-chinese-hacking-1445227440|url-status=live}}</ref>

In July 2015, [[Google]] invested in the company's [[Venture round#Round names|Series C funding round]], which was followed by Series D and Series E, raising a total of $480 million as of May 2019.<ref>{{Cite web|url=https://www.crn.com/news/security/300085371/crowdstrike-lands-100m-funding-round-looks-to-expand-globally-and-invest-in-partners.htm|title=Crowdstrike Lands $100M Funding Round, Looks To Expand Globally And Invest In Partners|last=Kuranda|first=Sarah|date=2017-05-17|website=CRN|access-date=2019-07-01|archive-date=3 June 2019|archive-url=https://web.archive.org/web/20190603145818/https://www.crn.com/news/security/300085371/crowdstrike-lands-100m-funding-round-looks-to-expand-globally-and-invest-in-partners.htm|url-status=live}}</ref><ref name="venturebeat.com">{{Cite web|url=https://venturebeat.com/2018/06/19/cybersecurity-startup-crowdstrike-raises-200-million-at-3-billion-valuation/|title=Cybersecurity startup CrowdStrike raises $200 million at $3 billion valuation|date=2018-06-19|website=VentureBeat|language=en-US|access-date=2019-07-01|archive-date=3 June 2019|archive-url=https://web.archive.org/web/20190603145815/https://venturebeat.com/2018/06/19/cybersecurity-startup-crowdstrike-raises-200-million-at-3-billion-valuation/|url-status=live}}</ref><ref>{{Cite web|url=https://www.bizjournals.com/sanjose/news/2019/05/31/crowdstrike-ipo-biggest-cybersecurity-companies.html|title=CrowdStrike may top these 6 biggest-ever U.S. security IPOs next month|website=www.bizjournals.com|access-date=2020-02-24|archive-date=28 April 2020|archive-url=https://web.archive.org/web/20200428021535/https://www.bizjournals.com/sanjose/news/2019/05/31/crowdstrike-ipo-biggest-cybersecurity-companies.html|url-status=live}}</ref>

In 2017, the company reached a valuation of more than $1 billion with an estimated annual revenue of $100 million.<ref>Hackett, Robert. (May 17, 2017). "Hack Investigator CrowdStrike Reaches $1 Billion Valuation". [http://fortune.com/2017/05/17/hack-crowdstrike-billion/ Fortune website] {{Webarchive|url=https://web.archive.org/web/20170529182052/http://fortune.com/2017/05/17/hack-crowdstrike-billion/ |date=29 May 2017 }} Retrieved 9 June 2017.</ref> In June 2018, the company said it was valued at more than $3 billion.<ref name="venturebeat.com"/> Investors include [[Telstra]], March Capital Partners, [[Rackspace]], [[Accel Partners]] and [[Warburg Pincus]].<ref>{{Cite web|url=http://social.techcrunch.com/2015/07/13/security-company-crowdstrike-scores-100m-led-by-google-capital/|title=Security Company CrowdStrike Scores $100M Led By Google Capital|website=TechCrunch|date=13 July 2015 |language=en-US|access-date=2019-07-01|archive-date=4 April 2019|archive-url=https://web.archive.org/web/20190404062231/https://techcrunch.com/2015/07/13/security-company-crowdstrike-scores-100m-led-by-google-capital/|url-status=live}}</ref><ref>{{Cite web|url=https://www.bizjournals.com/losangeles/news/2017/05/17/crowdstrike-raises-100-million-for-cybersecurity.html|title=CrowdStrike raises $100 million for cybersecurity|website=www.bizjournals.com|access-date=2020-02-24|archive-date=28 April 2020|archive-url=https://web.archive.org/web/20200428021532/https://www.bizjournals.com/losangeles/news/2017/05/17/crowdstrike-raises-100-million-for-cybersecurity.html|url-status=live}}</ref>

In June 2019, the company made an [[initial public offering]] on the [[Nasdaq]].<ref>{{Cite web|url=https://www.ft.com/content/27730018-8ca8-11e9-a24d-b42f641eca37|title=Cyber security group CrowdStrike's shares jump nearly 90% after IPO|last=Murphy|first=Hannah|date=12 June 2019|website=Financial Times}}</ref><ref>{{Cite web|url=https://www.cnbc.com/2019/06/12/crowdstrike-ipo-stock-starts-trading-on-the-nasdaq.html|title=CrowdStrike pops more than 70% in debut, now worth over $11 billion|last=Feiner|first=Lauren|date=2019-06-12|website=CNBC|language=en|access-date=2019-06-12|archive-date=12 June 2019|archive-url=https://web.archive.org/web/20190612210700/https://www.cnbc.com/2019/06/12/crowdstrike-ipo-stock-starts-trading-on-the-nasdaq.html|url-status=live}}</ref>

===Acquisitions: 2020–2024===
In September 2020, CrowdStrike acquired [[Zero trust company|zero trust]] and [[conditional access]] technology provider Preempt Security for $96 million.<ref>{{Cite web|last=Gagliordi|first=Natalie|title=CrowdStrike to acquire Preempt Security for $96 million|url=https://www.zdnet.com/article/crowdstrike-to-acquire-preempt-security-for-96-million/|access-date=2020-09-28|website=ZDNet|language=en|archive-date=26 September 2020|archive-url=https://web.archive.org/web/20200926131559/https://www.zdnet.com/article/crowdstrike-to-acquire-preempt-security-for-96-million/|url-status=live}}</ref> In February 2021, the company acquired Danish [[log management]] platform Humio for $400&nbsp;million with plans to integrate Humio's log aggregation into CrowdStrike's [[Extended detection and response|XDR]] offering.<ref>{{Cite web|last=Cimpanu|first=Catalin|date=2021-02-18|title=CrowdStrike acquires Humio for $400 million|url=https://www.zdnet.com/article/crowdstrike-acquires-humio-for-400-million/|work=ZDNet|access-date=2024-07-10 }}</ref> Later that November, CrowdStrike acquired SecureCircle, a SaaS-based cybersecurity service that extends zero trust endpoint security to include data.<ref>{{Cite web|last=Novinson|first=Michael|date=2021-11-01|title=CrowdStrike To Buy Data Protection Startup SecureCircle|url=https://www.crn.com/news/security/crowdstrike-to-buy-data-protection-startup-securecircle|access-date=2024-06-10|work=CRN|language=en}}</ref>  In December 2021, the company moved its headquarters location from [[Sunnyvale, California]], to Austin, Texas.<ref>{{Cite web|date=2021-12-28|title=CrowdStrike Changes Principal Office to Austin, Texas|url=https://www.crowdstrike.com/blog/crowdstrike-changes-principal-executive-office-to-austin-texas/|access-date=2022-02-02|website=CrowdStrike|language=en}}</ref> In 2023, CrowdStrike introduced CrowdStream service in collaboration with [[Cribl.io]].<ref>{{Cite web |last=Alspach |first=Kyle |title=RSAC 2023 Sees Big Moves From SentinelOne, CrowdStrike, Google Cloud, Accenture {{!}} CRN |url=https://www.crn.com/news/security/rsac-2023-sees-big-moves-from-sentinelone-crowdstrike-google-cloud-accenture |access-date=2024-02-29 |website=www.crn.com}}</ref> CrowdStrike has also focused on working with the U.S. government and selling its services to government agencies.<ref>{{cite news |title=CrowdStrike CEO George Kurtz on China, Microsoft and the SEC |url=https://www.cnbc.com/2023/12/14/crowdstrike-ceo-george-kurtz-on-china-microsoft-and-the-sec.html |work=CNBC |date=December 14, 2023}}</ref> CrowdStrike joined the [[S&P 500]] index in June 2024.<ref>{{Cite web |last=Carson |first=Ed |date=2024-06-09 |title=CrowdStrike, KKR, GoDaddy To Join S&P 500 In Quarterly Rebalance; Stocks Jump |url=https://www.investors.com/news/sp-500-crowdstrike-kkr-godaddy-quarterly-rebalance/ |access-date= |website=Investor's Business Daily |language=en-US}}</ref> In 2023, CrowdStrike acquired [[Israel]]i cybersecurity startup Bionic.ai.<ref>{{cite news |title=CrowdStrike acquiring cyber startup Bionic for $350 million |url=https://www.calcalistech.com/ctechnews/article/hyquwtlka |work=CTech |date=19 September 2023}}</ref> In 2024, CrowdStrike acquired Israeli startup Flow Security.<ref>{{cite news |title=CrowdStrike acquiring cyber startup Flow Security in $200 million deal |url=https://www.calcalistech.com/ctechnews/article/ryawyqb6p |work=CTech |date=6 March 2024}}</ref>

==Russian hacking investigations==
CrowdStrike helped investigate the [[Democratic National Committee cyber attacks|Democratic National Committee cyberattacks]] and a connection to Russian intelligence services. On March 20, 2017, [[James Comey]] testified before congress stating, "CrowdStrike, [[Mandiant]], and [[ThreatConnect]] review[ed] the evidence of the hack and conclude[d] with high certainty that it was the work of [[Fancy Bear|APT 28]] and [[Cozy Bear|APT 29]] who are known to be Russian intelligence services."<ref>{{cite news |url=https://www.washingtonpost.com/news/post-politics/wp/2017/03/20/full-transcript-fbi-director-james-comey-testifies-on-russian-interference-in-2016-election/ |title=Full transcript: FBI Director James Comey testifies on Russian interference in 2016 election |access-date=2017-05-22 |archive-date=23 May 2017 |archive-url=https://web.archive.org/web/20170523113641/https://www.washingtonpost.com/news/post-politics/wp/2017/03/20/full-transcript-fbi-director-james-comey-testifies-on-russian-interference-in-2016-election/ |url-status=live }}</ref> Comey previously testified in January 2017 that a request for [[Federal Bureau of Investigation|FBI]] forensics investigators to access the DNC servers was denied, saying "Ultimately what was agreed to is the private company [CrowdStrike] would share with us what they saw."<ref>{{cite news |title=FBI Director Comey: Agency requested access to DNC server |url=https://www.cbsnews.com/news/fbi-director-comey-agency-requested-access-to-dnc-servers/ |work=CBS News |date=January 10, 2017}}</ref>

In December 2016, CrowdStrike released a report stating that Russian government-affiliated group [[Fancy Bear]] had hacked a Ukrainian artillery app.<ref>{{cite web |url=https://www.theverge.com/2016/12/23/14068992/russian-hack-dnc-ukraine-military-malware-crowdstrike |title=Russian hackers linked to DNC attack also targeted Ukrainian military, says report |website=theverge.com |date=2016-12-23 |access-date=2019-06-26 |archive-date=17 November 2019 |archive-url=https://web.archive.org/web/20191117011408/https://www.theverge.com/2016/12/23/14068992/russian-hack-dnc-ukraine-military-malware-crowdstrike |url-status=live }}</ref> They concluded that Russia had used the hack to cause large losses to Ukrainian artillery units.  The app (called ArtOS) is installed on tablet PCs and used for fire-control.<ref>{{Cite web|url=http://noosphereengineering.com/en/news/new-brainchild-of-engineering-school-was-tested-by-the-armed-forces|title=New brainchild of engineering school was tested by the armed forces|last=Noosphere engineering school|date=October 31, 2015|website=noosphereengineering.com|access-date=December 28, 2017|archive-date=29 December 2017|archive-url=https://web.archive.org/web/20171229052415/http://noosphereengineering.com/en/news/new-brainchild-of-engineering-school-was-tested-by-the-armed-forces|url-status=live}}</ref> CrowdStrike also found a hacked variation of POPR-D30 being distributed on Ukrainian military forums that utilized an [[X-Agent]] implant.<ref>{{Cite web|url=http://blog.crysys.hu/2017/01/technical-details-on-the-fancy-bear-android-malware-poprd30-apk|title=Technical details on the Fancy Bear Android malware (poprd30.apk)|last=Boldi|date=January 3, 2017|website=Laboratory of Cryptography and System Security, Budapest University of Technology and Economics|access-date=February 8, 2018|archive-date=9 February 2018|archive-url=https://web.archive.org/web/20180209063118/http://blog.crysys.hu/2017/01/technical-details-on-the-fancy-bear-android-malware-poprd30-apk/|url-status=live}}</ref>

The [[International Institute for Strategic Studies]] rejected CrowdStrike's assessment that claimed hacking caused losses to Ukrainian artillery units, saying that their data on Ukrainian D30 howitzer losses was misused in CrowdStrike's report. The Ukrainian Ministry of Defense also rejected the CrowdStrike report, stating that actual artillery losses were much smaller than what was reported by CrowdStrike and were not associated with Russian hacking.<ref>{{Cite news|url=https://www.voanews.com/a/crowdstrike-comey-russia-hack-dnc-clinton-trump/3776067.html|title=Think Tank: Cyber Firm at Center of Russian Hacking Charges Misread Data|last=Kuzmenko|first=Oleksiy|date=March 23, 2017|work=Voice of America|access-date=December 20, 2017|archive-date=20 January 2018|archive-url=https://web.archive.org/web/20180120231522/https://www.voanews.com/a/crowdstrike-comey-russia-hack-dnc-clinton-trump/3776067.html|url-status=live}}</ref> Prior to this, CrowdStrike had published a report claiming that malware used in Ukraine and against the [[Democratic National Committee]] (DNC) appeared to be unique and identical, further evidence for a Russian origin of the DNC attack.<ref>{{cite news |title=Group allegedly behind DNC hack targeted Ukraine, report finds |url=https://www.theguardian.com/technology/2016/dec/22/dnc-hack-crowdstrike-ukraine-malware-russia |work=The Guardian |date=22 December 2016}}</ref>

Cybersecurity firm SecureWorks discovered a list of email addresses targeted by Fancy Bear in phishing attacks. The list included the email address of Yaroslav Sherstyuk, the developer of ArtOS.<ref>{{Cite news|url=https://www.rferl.org/a/ukraine-russia-fancy-bear-hacking-artillery-guidance-app/28831564.html|title=Fancy Bear Tried To Hack E-Mail Of Ukrainian Making Artillery-Guidance App|last=Miller|first=Christopher|date=November 2, 2017|work=RadioFreeEurope|access-date=February 8, 2018|archive-date=6 February 2018|archive-url=https://web.archive.org/web/20180206040444/https://www.rferl.org/a/ukraine-russia-fancy-bear-hacking-artillery-guidance-app/28831564.html|url-status=live}}</ref> Additional [[Associated Press]] research supports CrowdStrike's conclusions about Fancy Bear.<ref>{{cite news |last1=Satter |first1=Raphael |title=Russia hackers pursued Putin foes, not just US Democrats |url=https://www.apnews.com/3bca5267d4544508bb523fa0db462cb2 |access-date=2 April 2019 |work=Associated Press |date=2 November 2017 |archive-date=2 April 2019 |archive-url=https://web.archive.org/web/20190402142500/https://www.apnews.com/3bca5267d4544508bb523fa0db462cb2 |url-status=live }}</ref> [[Radio Free Europe]] notes that the AP report "lends some credence to the original CrowdStrike report, showing that the app had, in fact, been targeted."<ref>{{cite news |last1=Miller |first1=Christopher |title='Fancy Bear' Tried To Hack E-Mail Of Ukrainian Making Artillery-Guidance App |url=https://www.rferl.org/a/ukraine-russia-fancy-bear-hacking-artillery-guidance-app/28831564.html |access-date=2 April 2019 |work=[[Radio Free Europe]]/[[Radio Liberty]] |date=2 November 2017 |archive-date=2 April 2019 |archive-url=https://web.archive.org/web/20190402142458/https://www.rferl.org/a/ukraine-russia-fancy-bear-hacking-artillery-guidance-app/28831564.html |url-status=live }}</ref>

In the [[Trump–Ukraine scandal]], [[Donald Trump]], then the [[president of the United States]], held a July 25, 2019, phone call with [[Volodymyr Zelensky]], the [[president of Ukraine]], in which Trump asked Zelensky to look into a conspiracy theory that was being promoted on [[far-right]] websites such as ''[[Breitbart News]]'' and Russian state media outlets such as [[RT (TV network)|Russia Today]] and [[Sputnik (news agency)|Sputnik]].<ref>{{cite web|first=Ryan|last=Broderick|url=https://www.buzzfeednews.com/article/ryanhatesthis/crowdstrike-4chan-qanon-conspiracy-theory|title=Here's How Donald Trump Ended Up Referencing A Russian-Promoted 4chan Conspiracy Theory In His Call To The Ukrainian President|website=[[Buzzfeed News]]|date=September 26, 2019|accessdate=February 11, 2024}}</ref> The theory held that namely, that the Ukrainian government used CrowdStrike to hack into the Democratic National Committee's servers in 2016 and frame Russia for the crime to undermine Trump in the [[U.S. presidential election, 2016|2016 presidential election]].<ref>{{cite news|first=Eileen|last=Sullivan|url=https://www.nytimes.com/2019/09/25/us/politics/crowdstrike-ukraine.html|title=How CrowdStrike Became Part of Trump's Ukraine Call|newspaper=[[The New York Times]]|date=September 25, 2019|accessdate=February 11, 2024}}</ref><ref>{{cite news|first=Joseph|last=Marks|url=https://www.washingtonpost.com/news/powerpost/paloma/the-cybersecurity-202/2019/09/26/the-cybersecurity-202-trump-s-crowdstrike-conspiracy-theory-shows-he-still-doubts-russian-election-interference/5d8ba0d088e0fa4b0ec245b7/|title=The Cybersecurity 202: Trump's CrowdStrike conspiracy theory shows he still doubts Russian election interference|newspaper=[[The Washington Post]]|date=September 26, 2019|accessdate=February 11, 2024}}</ref> The conspiracy theory has been repeatedly debunked.<ref>{{cite web|first=Frank|last=Bajak|url=https://apnews.com/article/23c9022665dc40a1a69e613459955112|title=Debunked Ukraine conspiracy theory is knocked down – again|work=[[Associated Press News]]|date=November 13, 2019|accessdate=February 11, 2024}}</ref><ref>{{cite web|first=Chris|last=Cillizza|authorlink=Chris Cillizza|url=https://www.cnn.com/2019/09/30/politics/crowdstrike-donald-trump-ukraine/index.html|title=Don't miss the totally debunked conspiracy theory Donald Trump pushed in the Ukraine call|website=[[CNN]]|date=September 30, 2019|accessdate=February 11, 2024}}</ref><ref>{{cite web|first=Ben|last=Collins|url=https://www.cnn.com/2019/09/30/politics/crowdstrike-donald-trump-ukraine/index.html|title=Trump seized on a conspiracy theory called the 'insurance policy.' Now, it's at the center of an impeachment investigation.|website=[[NBC News]]|date=October 3, 2019|accessdate=February 11, 2024}}</ref>

== Severe outage incidents ==
{{Main|2024 CrowdStrike incident}}CrowdStrike software has a history of causing serious outages on various platforms. At times these are fairly isolated, affecting a specific application<ref>{{Cite web |date=2022-08-03 |title=Crashes, possibly due to Crowdstrike Falcon Sensor |url=https://resource.dopus.com/t/crashes-possibly-due-to-crowdstrike-falcon-sensor/41852 |access-date=2024-07-22 |website=Directory Opus Resource Centre |language=en}}</ref><ref>{{Cite web |last=mati087 |date=2023-12-01 |title=BSOD caused by csagent.sys |url=http://www.reddit.com/r/crowdstrike/comments/18886ac/bsod_caused_by_csagentsys/ |access-date=2024-07-22 |website=r/crowdstrike}}</ref><ref>{{Cite web |date=2019-04-10 |title=Solved: CrowdStrike causes crashes |url=https://community.adobe.com/t5/download-install-discussions/solved-crowdstrike-causes-crashes/m-p/10392431#M63222 |access-date=2024-07-22 |website=https://community.adobe.com |language=en}}</ref> or operating system that is not as widely deployed as others.<ref>{{cite web |last1=Viswanathan |first1=Pradeep |title=CrowdStrike broke Debian and Rocky Linux months ago, but no one noticed |url=https://www.neowin.net/news/crowdstrike-broke-debian-and-rocky-linux-months-ago-but-no-one-noticed/ |website=Neowin |access-date=2024-07-22}}</ref> In some cases, these issues have caused serious outages that impacted servers across the world.

=== 2024 Debian Linux incident ===
On April 19, 2024, it was reported that a flawed software update pushed on a Friday evening was incompatible with up-to-date Debian Linux builds, despite being supported. A week later that caused all of the servers in the lab to crash and refuse to subsequently boot. When CrowdStrike was removed from the machine, it booted fine. CrowdStrike acknowledged the bug a day later and weeks later determined the root case.<ref>{{Cite web |last=C |first=Jack |date=2024-07-19 |title=Crowdstrike did this to our production linux fleet back on April 19th, and I've been dying to rant about it. |url=https://news.ycombinator.com/item?id=41005936 |url-status=live |archive-url=http://web.archive.org/web/20240722034855/https://news.ycombinator.com/item?id=41005936 |archive-date=2024-07-21 |access-date=2024-07-21 |website=Ycombinator}}</ref>

=== 2024 Linux incident ===
On May 13, 2024, it was reported that RockyLinux servers with CrowdStrike software may freeze after upgrading to RockyLinux 9.4.<ref>{{Cite web |date=2024-05-13 |title=Crowdstrike - freezing RockyLinux After 9.4 upgrade |url=https://forums.rockylinux.org/t/crowdstrike-freezing-rockylinux-after-9-4-upgrade/14041 |access-date=2024-07-22 |website=Rocky Linux Forum |language=en}}</ref> CrowdStrike reported that they were aware of the problem as it was the same issue due to a Linux Sensor in user mode combined with specific 6.x kernel versions.<ref>{{Cite web |url=https://supportportal.crowdstrike.com/s/article/Linux-Sensor-in-user-mode-may-fail-on-specific-6-x-kernel-versions |access-date=2024-07-22 |website=supportportal.crowdstrike.com}}</ref>[[File:CrowdStrike BSOD at LGA.jpg|thumb|287x287px|Multiple [[blue screens of death]], caused by an update pushed by CrowdStrike, on airport luggage conveyer belts at [[LaGuardia Airport]], [[New York City]]]]

=== 2024 Windows incident ===
On July 19, 2024, CrowdStrike released a software update to the [[vulnerability scanner]] Falcon Sensor. Flaws in the update caused [[Blue screen of death|blue screens of death]] on [[Microsoft Windows]] machines, disrupting millions of Windows computers worldwide.<ref>{{Cite web |last=Baran |first=Guru |date=19 July 2024 |title=CrowdStrike Update Pushing Windows Machines Into a BSOD Loop |url=https://cybersecuritynews.com/crowdstrike-update-bsod-loop/ |access-date=19 July 2024 |website=Cyber Security News |language=en-US}}</ref><ref name="register">{{cite web |last1=Sharwood |first1=Simon |title=CrowdStrike code update bricking Windows machines around the world |url=https://www.theregister.com/2024/07/19/crowdstrike_falcon_sensor_bsod_incident/ |access-date=19 July 2024 |website=The Register}}</ref> Affected machines were forced into a [[bootloop]], making them unusable. This was caused by an update to a configuration file, Channel File 291, which CrowdStrike says triggered a logic error and caused the operating system to crash.<ref>{{Cite web |last=CrowdStrike |date=2024-07-20 |title=Technical Details: Falcon Update for Windows Hosts {{!}} CrowdStrike |url=https://www.crowdstrike.com/blog/falcon-update-for-windows-hosts-technical-details/ |access-date=2024-07-20 |website=crowdstrike.com |language=en}}</ref> The downtime caused a widespread global impact, grounding commercial airline flights, temporarily taking [[Sky News]] and other broadcasters offline, and disrupting banking and healthcare services as well as [[911 (emergency telephone number)|911]] emergency call centers.<ref>{{Cite web |last=Godfrey |first=Paul |last2=Druker |first2=Simon |last3=Wynder |first3=Ehren |date=2024-07-19 |title=911 call centers back online after IT outage causes global chaos  |url=https://www.upi.com/Top_News/World-News/2024/07/19/IT-failure-hits-causes-chaos-around-world/2531721376791 |access-date=2024-07-19 |website=United Press International |language=en}}</ref><ref>{{Cite web |last=Warren |first=Tom |date=2024-07-19 |title=Major Windows BSOD issue takes banks, airlines, and broadcasters offline |url=https://www.theverge.com/2024/7/19/24201717/windows-bsod-crowdstrike-outage-issue |access-date=2024-07-19 |website=The Verge |language=en}}</ref>
By the end of the day, CrowdStrike shares closed trading at a price of $304.96, down 38.09 points or 11.10%.<ref>{{cite web |title=CrowdStrike Holdings Inc CRWD:NASDAQ |url=https://www.cnbc.com/quotes/CRWD |website=cnbc.com |publisher=cnbc.com |access-date=19 July 2024}}</ref>

Although CrowdStrike fixed the update, computers stuck in a bootloop were still unable to connect to the Internet to download the patch before Falcon can load in and crash the device again. The recommended solution from CrowdStrike was to boot into safe mode or Windows Recovery Mode and manually delete Channel File 291.<ref>{{Cite web |title=KB5042421: CrowdStrike issue impacting Windows endpoints causing an 0x50 or 0x7E error message on a blue screen - Microsoft Support |url=https://support.microsoft.com/en-us/topic/b1c700e0-7317-4e95-aeee-5d67dd35b92f |access-date=2024-07-20 |website=support.microsoft.com}}</ref> This requires local administrator access and if the device is encrypted by [[BitLocker|Bitlocker]] will also require a recovery key.<ref>{{Cite web |last=Warren |first=Tom |date=2024-07-19 |title=Here’s how IT admins are fixing the Windows Blue Screen of Death chaos |url=https://www.theverge.com/2024/7/19/24201806/microsoft-windows-bsod-pc-crashing-crowdstrike-fix |access-date=2024-07-20 |website=The Verge |language=en}}</ref> Microsoft has reported that some customers have been able to remediate the issue solely by rebooting impacted devices up to 15 times.<ref>{{Cite web |last=Warren |first=Tom |date=2024-07-19 |title=Microsoft on CrowdStrike outage: have you tried turning it off and on? (15 times) |url=https://www.theverge.com/2024/7/19/24201927/microsoft-crowdstrike-update-fix-turn-off-on-pc |access-date=2024-07-20 |website=The Verge |language=en}}</ref>{{pp|small=yes}}
{{current related||2024 CrowdStrike incident|date=July 2024}}
{{short description|American cybersecurity technology company}}
{{Use American English|date=July 2020}}
{{Use dmy dates|date=June 2016}}
{{Infobox company
| name = CrowdStrike Holdings, Inc.
| logo = CrowdStrike logo.svg
| type = [[Public company|Public]]
| traded_as = {{ubl|class=nowrap|{{NASDAQ|CRWD}} (Class A)|[[Nasdaq-100]] component|[[S&P 500]] component}}
| founded = {{Start date and age|2011}}
| founders = {{ubl|[[George Kurtz]]|[[Dmitri Alperovitch]]|Gregg Marston}}
| industry = [[Information security]]
| hq_location_city = [[Austin, Texas]]
| hq_location_country = United States
| key_people = {{ubl|George Kurtz ([[Chief executive officer|CEO]])|Michael Sentonas (President)<ref name="afr-sentonas-pres-21-mar-2024">{{cite news |last1=Richardson |first1=Tom |title=CrowdStrike’s Australian boss snares $225m cybersecurity fortune |url=https://www.afr.com/markets/equity-markets/crowdstrike-s-australian-boss-snares-225m-cybersecurity-fortune-20240326-p5ff9c |access-date=21 July 2024 |work=Australian Financial Review |date=31 March 2024 |language=en}}</ref>}}
| num_employees = 7,925
| num_employees_year = FY24
| revenue = {{increase}} {{US$|3.06 billion|link=yes}}
| revenue_year = FY24
| operating_income = {{increasenegative}} US$−2 million
| income_year = FY24
| net_income = {{increase}} US$89.3 million
| net_income_year = FY24
| assets = {{increase}} US$6.65 billion
| assets_year = FY24
| equity = {{increase}} US$2.30 billion
| equity_year = FY24
| website = {{Official URL}}
| footnotes = Financials {{as of|2024|1|31|df=US|pre=fiscal year ended|lc=y}}.<br />References:<ref name=10K>{{cite web |title=US SEC: Form 10-K Crowdstrike Holdings, Inc. |url=https://www.sec.gov/ix?doc=/Archives/edgar/data/1535527/000153552724000007/crwd-20240131.htm |publisher=[[U.S. Securities and Exchange Commission]] |date=March 7, 2024}}</ref>
}}
'''CrowdStrike Holdings, Inc.''' is an American [[computer security|cybersecurity]] technology company based in [[Austin, Texas]]. It provides [[endpoint security]], [[Threat Intelligence Platform|threat intelligence]], and [[cyberattack]] response services.<ref>{{cite web|url=http://www.techrepublic.com/article/crowdstrikes-security-software-targets-bad-guys-not-their-malware/|title=CrowdStrike's security software targets bad guys, not their malware|date=9 October 2015 |publisher=[[TechRepublic]]|access-date=10 June 2016|archive-date=2 June 2016|archive-url=https://web.archive.org/web/20160602141536/http://www.techrepublic.com/article/crowdstrikes-security-software-targets-bad-guys-not-their-malware/|url-status=live}}</ref>

The company has been involved in investigations of several high-profile cyberattacks, including the 2014 [[Sony Pictures hack]], the 2015–16 [[DNC cyber attacks|cyberattacks on the Democratic National Committee]] (DNC), and the 2016 [[2016 Democratic National Committee email leak|email leak involving the DNC]].<ref>{{cite web| url=http://www.csoonline.com/article/2880095/cyber-attacks-espionage/crowdstrike-demonstrates-how-attackers-wiped-the-data-from-the-machines-at-sony.html| title=CrowdStrike demonstrates how attackers wiped the data from the machines at Sony| date=2015| access-date=2016-06-09| publisher=[[International Data Group]]| archive-date=20 August 2016| archive-url=https://web.archive.org/web/20160820201015/http://www.csoonline.com/article/2880095/cyber-attacks-espionage/crowdstrike-demonstrates-how-attackers-wiped-the-data-from-the-machines-at-sony.html| url-status=live}}</ref><ref>{{cite news |first1=Tom|last1=Hamburger |first2=Ellen |last2=Nakashima |title=Clinton campaign – and some cyber experts – say Russia is behind email release |newspaper=[[The Washington Post]] |date=July 24, 2016 |url=https://www.washingtonpost.com/politics/clinton-campaign--and-some-cyber-experts--say-russia-is-behind-email-release/2016/07/24/5b5428e6-51a8-11e6-bbf5-957ad17b4385_story.html }}</ref> In July 2024, a faulty update to its security software caused [[2024 CrowdStrike incident|global computer outages]] that disrupted air travel, banking, broadcasting, and other services.<ref name="banfield-nwachi-2024">{{cite news | last1 = Banfield-Nwachi | first1 = Mabel | title = Windows global IT outage: what we know so far
 | date = 19 July 2024 | work = The Guardian | location = London, United Kingdom | issn = 0261-3077 | url = https://www.theguardian.com/technology/article/2024/jul/19/windows-global-it-outage-what-we-know-so-far | access-date = 2024-07-19}}</ref><ref>{{Cite web |date=2024-07-19 |title=Crowdstrike and Microsoft: What we know about global IT outage |url=https://www.bbc.com/news/articles/cp4wnrxqlewo |access-date=2024-07-19 |website=BBC News |language=en-GB|first=Robert|last=Plummer}}</ref><ref>{{Cite web |last=Godfrey |first=Paul |last2=Druker |first2=Simon |last3=Wynder |first3=Ehren |date=2024-07-19 |title=911 call centers back online after IT outage causes global chaos  |url=https://www.upi.com/Top_News/World-News/2024/07/19/IT-failure-hits-causes-chaos-around-world/2531721376791 |access-date=2024-07-19 |website=United Press International |language=en}}</ref>

==History==
===Founding: 2011–2019===
CrowdStrike was co-founded in 2011 by [[George Kurtz]] (CEO), [[Dmitri Alperovitch]] (former CTO), and Gregg Marston (CFO, retired).<ref>{{Cite web|url=https://fortune.com/2015/07/29/crowdstrike-cybersecurity-george-kurtz/|title=In conversation with George Kurtz, CEO of CrowdStrike|website=Fortune|language=en|access-date=2019-07-01|archive-date=1 July 2019|archive-url=https://web.archive.org/web/20190701225427/https://fortune.com/2015/07/29/crowdstrike-cybersecurity-george-kurtz/|url-status=live}}</ref><ref>{{Cite web|url=https://www.bloomberg.com/profile/person/17185150?sref=eMecddu3|title=Bloomberg – Dmitri Alperovitch|website=www.bloomberg.com|access-date=2020-02-14|archive-date=14 July 2020|archive-url=https://web.archive.org/web/20200714191756/https://www.bloomberg.com/profile/person/17185150?sref=eMecddu3|url-status=live}}</ref><ref>{{cite news|url=http://fortune.com/2015/07/29/crowdstrike-cybersecurity-george-kurtz/|title=Standing up at the gates of hell: CrowdStrike CEO George Kurtz|date=29 July 2015|work=[[Fortune (magazine)|Fortune]]|access-date=10 June 2016|archive-date=29 May 2016|archive-url=https://web.archive.org/web/20160529191620/http://fortune.com/2015/07/29/crowdstrike-cybersecurity-george-kurtz/|url-status=live}}</ref><ref>{{Cite web|url=https://www.inc.com/cameron-albert-deitch/crowdstrike-cybersecurity-unicorn-ipo.html|title=CrowdStrike, the $3.4 Billion Startup That Fought Russian Spies in 2016, Just Filed for an IPO|last=Albert-Deitch|first=Cameron|date=2019-05-15|website=Inc.com|access-date=2019-07-01|archive-date=3 June 2019|archive-url=https://web.archive.org/web/20190603200440/https://www.inc.com/cameron-albert-deitch/crowdstrike-cybersecurity-unicorn-ipo.html|url-status=live}}</ref> The following year, they hired Shawn Henry, a former [[Federal Bureau of Investigation]] (FBI) official, to lead the subsidiary CrowdStrike Services, Inc., which offered security and response services.<ref>{{cite web |last1=Ragan |first1=Steve |title=Former FBI Exec to Head CrowdStrike Services |url=https://www.securityweek.com/former-fbi-exec-head-crowdstrike-services |access-date=13 December 2020 |work=SecurityWeek |date=23 April 2012}}</ref><ref>{{cite web|url=https://www.networkworld.com/article/708534/malware-cybercrime-top-fbi-cyber-cop-joins-startup-crowdstrike-to-fight-enterprise-intrusions.html|title=Top FBI cyber cop joins startup CrowdStrike to fight enterprise intrusions|first=Ellen|last=Messmer|date=18 April 2012 |publisher=[[International Data Group#IDG Global Brands|Network World]]|access-date=10 June 2016|archive-date=8 March 2024|archive-url=https://web.archive.org/web/20240308153855/https://www.networkworld.com/article/708534/malware-cybercrime-top-fbi-cyber-cop-joins-startup-crowdstrike-to-fight-enterprise-intrusions.html|url-status=live}}</ref> The company launched CrowdStrike Falcon, an [[antivirus]] package, as its first product in June 2013.<ref>{{Cite web|url=https://www.networkworld.com/article/2168251/start-up-tackles-advanced-persistent-threats-on-microsoft--apple-computers.html|title=Start-up tackles advanced persistent threats on Microsoft, Apple computers|last=Messmer|first=Ellen|date=2013-06-18|website=Network World|language=en|access-date=2019-07-01|archive-date=17 May 2019|archive-url=https://web.archive.org/web/20190517002912/https://www.networkworld.com/article/2168251/start-up-tackles-advanced-persistent-threats-on-microsoft--apple-computers.html|url-status=live}}</ref><ref>{{Cite news|url=https://www.reuters.com/assets/print?aid=USKBN0N41PT20150413|title=U.S. firm CrowdStrike claims success in deterring Chinese hackers|date=2015-04-13|newspaper=Reuters|access-date=2016-06-14|archive-date=12 November 2017|archive-url=https://web.archive.org/web/20171112131754/https://www.reuters.com/assets/print?aid=USKBN0N41PT20150413|url-status=live}}</ref>

In May 2014, CrowdStrike's reports helped the [[United States Department of Justice]] to charge five [[Cyberwarfare by China|Chinese military hackers]] with economic [[cyber espionage]] against U.S. corporations.<ref>{{Cite news|last=Gorman|first=Devlin Barrett and Siobhan|url=https://www.wsj.com/articles/u-s-justice-department-to-charge-chinese-army-workers-hacked-u-s-firms-1400499708|title=U.S. Charges Five in Chinese Army With Hacking|date=2014-05-20|work=Wall Street Journal|access-date=2020-02-14|language=en-US|issn=0099-9660|archive-date=15 February 2020|archive-url=https://web.archive.org/web/20200215052007/https://www.wsj.com/articles/u-s-justice-department-to-charge-chinese-army-workers-hacked-u-s-firms-1400499708|url-status=live}}</ref> CrowdStrike also uncovered the activities of [[Energetic Bear]], a group connected to [[Russian Federation|Russia]]'s [[Federal Security Service]] that conducted intelligence operations against global targets, primarily in the energy sector.<ref>{{Cite web|url=https://www.cyberscoop.com/us-nuclear-hack-russia-energetic-bear-fireeye-phishing-watering-hole/|title=The old foe, new attack and unsolved mystery in the recent U.S. energy sector hacking campaign|date=2017-07-12|website=CyberScoop|language=en|access-date=2020-02-14|archive-date=24 September 2019|archive-url=https://web.archive.org/web/20190924072304/https://www.cyberscoop.com/us-nuclear-hack-russia-energetic-bear-fireeye-phishing-watering-hole/|url-status=live}}</ref>

After the [[Sony Pictures hack]], CrowdStrike uncovered evidence implicating the government of [[North Korea]] and demonstrated how the attack was carried out.<ref>{{Cite web|url=http://www.pcworld.com/article/2885592/whats-in-a-typo-more-evidence-tying-north-korea-to-the-sony-hack.html|title=What's in a typo? More evidence tying North Korea to the Sony hack|website=PCWorld|access-date=2016-06-14|archive-date=19 August 2016|archive-url=https://web.archive.org/web/20160819051957/http://www.pcworld.com/article/2885592/whats-in-a-typo-more-evidence-tying-north-korea-to-the-sony-hack.html|url-status=live}}</ref> In 2014, CrowdStrike helped identify members of Putter Panda, the state-sponsored Chinese group of hackers also known as [[PLA Unit 61486]].<ref>{{Cite news|url=https://www.nytimes.com/2014/06/10/technology/private-report-further-details-chinese-cyberattacks.html?pagewanted=print|title=2nd China Army Unit Implicated in Online Spying|last=Perlroth|first=Nicole|date=2014-06-09|newspaper=The New York Times|access-date=2016-06-14|issn=0362-4331|archive-date=12 November 2017|archive-url=https://web.archive.org/web/20171112074612/https://www.nytimes.com/2014/06/10/technology/private-report-further-details-chinese-cyberattacks.html?pagewanted=print|url-status=live}}</ref><ref>{{Cite news|url=http://www.ft.com/intl/cms/s/0/3a1652ce-f027-11e3-9b4c-00144feabdc0.html|title=Second China unit accued of cyber crime|date=June 10, 2014|work=Financial Times|access-date=June 10, 2014}}</ref>

In May 2015, the company released information about [[VENOM]], a critical flaw in an open-source [[hypervisor]] called [[QEMU|Quick Emulator (QEMU)]] that allowed attackers to access sensitive personal information.<ref>{{Cite web|url=http://fortune.com/2015/05/13/venom-vulnerability/|title='Venom' vulnerability: Serious computer bug shatters cloud security|date=2015-05-13|website=Fortune|access-date=2016-06-14|archive-date=25 April 2016|archive-url=https://web.archive.org/web/20160425105322/http://fortune.com/2015/05/13/venom-vulnerability/|url-status=live}}</ref><ref>{{Cite web|url=https://arstechnica.com/information-technology/2015/05/extremely-serious-virtual-machine-bug-threatens-cloud-providers-everywhere/|title=Extremely serious virtual machine bug threatens cloud providers everywhere|last=Goodin|first=Dan|date=2015-05-13|website=Ars Technica|language=en-us|access-date=2019-07-01|archive-date=22 June 2019|archive-url=https://web.archive.org/web/20190622131725/https://arstechnica.com/information-technology/2015/05/extremely-serious-virtual-machine-bug-threatens-cloud-providers-everywhere/|url-status=live}}</ref> In October 2015, CrowdStrike announced that it had identified Chinese hackers attacking technology and pharmaceutical companies around the time that [[President of the United States|U.S. President]] [[Barack Obama]] and China's leader [[Xi Jinping]] publicly agreed not to conduct [[Chinese espionage in the United States|economic espionage against each other]]. The alleged hacking would have been in violation of that agreement.<ref>{{Cite news|url=https://www.wsj.com/articles/report-warns-of-chinese-hacking-1445227440|title=Report Warns of Chinese Hacking|last=Yadron|first=Danny|newspaper=Wall Street Journal|date=19 October 2015 |language=en-US|access-date=2019-07-01|archive-date=17 May 2019|archive-url=https://web.archive.org/web/20190517002912/https://www.wsj.com/articles/report-warns-of-chinese-hacking-1445227440|url-status=live}}</ref>

In July 2015, [[Google]] invested in the company's [[Venture round#Round names|Series C funding round]], which was followed by Series D and Series E, raising a total of $480 million as of May 2019.<ref>{{Cite web|url=https://www.crn.com/news/security/300085371/crowdstrike-lands-100m-funding-round-looks-to-expand-globally-and-invest-in-partners.htm|title=Crowdstrike Lands $100M Funding Round, Looks To Expand Globally And Invest In Partners|last=Kuranda|first=Sarah|date=2017-05-17|website=CRN|access-date=2019-07-01|archive-date=3 June 2019|archive-url=https://web.archive.org/web/20190603145818/https://www.crn.com/news/security/300085371/crowdstrike-lands-100m-funding-round-looks-to-expand-globally-and-invest-in-partners.htm|url-status=live}}</ref><ref name="venturebeat.com">{{Cite web|url=https://venturebeat.com/2018/06/19/cybersecurity-startup-crowdstrike-raises-200-million-at-3-billion-valuation/|title=Cybersecurity startup CrowdStrike raises $200 million at $3 billion valuation|date=2018-06-19|website=VentureBeat|language=en-US|access-date=2019-07-01|archive-date=3 June 2019|archive-url=https://web.archive.org/web/20190603145815/https://venturebeat.com/2018/06/19/cybersecurity-startup-crowdstrike-raises-200-million-at-3-billion-valuation/|url-status=live}}</ref><ref>{{Cite web|url=https://www.bizjournals.com/sanjose/news/2019/05/31/crowdstrike-ipo-biggest-cybersecurity-companies.html|title=CrowdStrike may top these 6 biggest-ever U.S. security IPOs next month|website=www.bizjournals.com|access-date=2020-02-24|archive-date=28 April 2020|archive-url=https://web.archive.org/web/20200428021535/https://www.bizjournals.com/sanjose/news/2019/05/31/crowdstrike-ipo-biggest-cybersecurity-companies.html|url-status=live}}</ref>

In 2017, the company reached a valuation of more than $1 billion with an estimated annual revenue of $100 million.<ref>Hackett, Robert. (May 17, 2017). "Hack Investigator CrowdStrike Reaches $1 Billion Valuation". [http://fortune.com/2017/05/17/hack-crowdstrike-billion/ Fortune website] {{Webarchive|url=https://web.archive.org/web/20170529182052/http://fortune.com/2017/05/17/hack-crowdstrike-billion/ |date=29 May 2017 }} Retrieved 9 June 2017.</ref> In June 2018, the company said it was valued at more than $3 billion.<ref name="venturebeat.com"/> Investors include [[Telstra]], March Capital Partners, [[Rackspace]], [[Accel Partners]] and [[Warburg Pincus]].<ref>{{Cite web|url=http://social.techcrunch.com/2015/07/13/security-company-crowdstrike-scores-100m-led-by-google-capital/|title=Security Company CrowdStrike Scores $100M Led By Google Capital|website=TechCrunch|date=13 July 2015 |language=en-US|access-date=2019-07-01|archive-date=4 April 2019|archive-url=https://web.archive.org/web/20190404062231/https://techcrunch.com/2015/07/13/security-company-crowdstrike-scores-100m-led-by-google-capital/|url-status=live}}</ref><ref>{{Cite web|url=https://www.bizjournals.com/losangeles/news/2017/05/17/crowdstrike-raises-100-million-for-cybersecurity.html|title=CrowdStrike raises $100 million for cybersecurity|website=www.bizjournals.com|access-date=2020-02-24|archive-date=28 April 2020|archive-url=https://web.archive.org/web/20200428021532/https://www.bizjournals.com/losangeles/news/2017/05/17/crowdstrike-raises-100-million-for-cybersecurity.html|url-status=live}}</ref>

In June 2019, the company made an [[initial public offering]] on the [[Nasdaq]].<ref>{{Cite web|url=https://www.ft.com/content/27730018-8ca8-11e9-a24d-b42f641eca37|title=Cyber security group CrowdStrike's shares jump nearly 90% after IPO|last=Murphy|first=Hannah|date=12 June 2019|website=Financial Times}}</ref><ref>{{Cite web|url=https://www.cnbc.com/2019/06/12/crowdstrike-ipo-stock-starts-trading-on-the-nasdaq.html|title=CrowdStrike pops more than 70% in debut, now worth over $11 billion|last=Feiner|first=Lauren|date=2019-06-12|website=CNBC|language=en|access-date=2019-06-12|archive-date=12 June 2019|archive-url=https://web.archive.org/web/20190612210700/https://www.cnbc.com/2019/06/12/crowdstrike-ipo-stock-starts-trading-on-the-nasdaq.html|url-status=live}}</ref>

===Acquisitions: 2020–2024===
In September 2020, CrowdStrike acquired [[Zero trust company|zero trust]] and [[conditional access]] technology provider Preempt Security for $96 million.<ref>{{Cite web|last=Gagliordi|first=Natalie|title=CrowdStrike to acquire Preempt Security for $96 million|url=https://www.zdnet.com/article/crowdstrike-to-acquire-preempt-security-for-96-million/|access-date=2020-09-28|website=ZDNet|language=en|archive-date=26 September 2020|archive-url=https://web.archive.org/web/20200926131559/https://www.zdnet.com/article/crowdstrike-to-acquire-preempt-security-for-96-million/|url-status=live}}</ref> In February 2021, the company acquired Danish [[log management]] platform Humio for $400&nbsp;million with plans to integrate Humio's log aggregation into CrowdStrike's [[Extended detection and response|XDR]] offering.<ref>{{Cite web|last=Cimpanu|first=Catalin|date=2021-02-18|title=CrowdStrike acquires Humio for $400 million|url=https://www.zdnet.com/article/crowdstrike-acquires-humio-for-400-million/|work=ZDNet|access-date=2024-07-10 }}</ref> Later that November, CrowdStrike acquired SecureCircle, a SaaS-based cybersecurity service that extends zero trust endpoint security to include data.<ref>{{Cite web|last=Novinson|first=Michael|date=2021-11-01|title=CrowdStrike To Buy Data Protection Startup SecureCircle|url=https://www.crn.com/news/security/crowdstrike-to-buy-data-protection-startup-securecircle|access-date=2024-06-10|work=CRN|language=en}}</ref>  In December 2021, the company moved its headquarters location from [[Sunnyvale, California]], to Austin, Texas.<ref>{{Cite web|date=2021-12-28|title=CrowdStrike Changes Principal Office to Austin, Texas|url=https://www.crowdstrike.com/blog/crowdstrike-changes-principal-executive-office-to-austin-texas/|access-date=2022-02-02|website=CrowdStrike|language=en}}</ref> In 2023, CrowdStrike introduced CrowdStream service in collaboration with [[Cribl.io]].<ref>{{Cite web |last=Alspach |first=Kyle |title=RSAC 2023 Sees Big Moves From SentinelOne, CrowdStrike, Google Cloud, Accenture {{!}} CRN |url=https://www.crn.com/news/security/rsac-2023-sees-big-moves-from-sentinelone-crowdstrike-google-cloud-accenture |access-date=2024-02-29 |website=www.crn.com}}</ref> CrowdStrike has also focused on working with the U.S. government and selling its services to government agencies.<ref>{{cite news |title=CrowdStrike CEO George Kurtz on China, Microsoft and the SEC |url=https://www.cnbc.com/2023/12/14/crowdstrike-ceo-george-kurtz-on-china-microsoft-and-the-sec.html |work=CNBC |date=December 14, 2023}}</ref> CrowdStrike joined the [[S&P 500]] index in June 2024.<ref>{{Cite web |last=Carson |first=Ed |date=2024-06-09 |title=CrowdStrike, KKR, GoDaddy To Join S&P 500 In Quarterly Rebalance; Stocks Jump |url=https://www.investors.com/news/sp-500-crowdstrike-kkr-godaddy-quarterly-rebalance/ |access-date= |website=Investor's Business Daily |language=en-US}}</ref> In 2023, CrowdStrike acquired [[Israel]]i cybersecurity startup Bionic.ai.<ref>{{cite news |title=CrowdStrike acquiring cyber startup Bionic for $350 million |url=https://www.calcalistech.com/ctechnews/article/hyquwtlka |work=CTech |date=19 September 2023}}</ref> In 2024, CrowdStrike acquired Israeli startup Flow Security.<ref>{{cite news |title=CrowdStrike acquiring cyber startup Flow Security in $200 million deal |url=https://www.calcalistech.com/ctechnews/article/ryawyqb6p |work=CTech |date=6 March 2024}}</ref>

==Russian hacking investigations==
CrowdStrike helped investigate the [[Democratic National Committee cyber attacks|Democratic National Committee cyberattacks]] and a connection to Russian intelligence services. On March 20, 2017, [[James Comey]] testified before congress stating, "CrowdStrike, [[Mandiant]], and [[ThreatConnect]] review[ed] the evidence of the hack and conclude[d] with high certainty that it was the work of [[Fancy Bear|APT 28]] and [[Cozy Bear|APT 29]] who are known to be Russian intelligence services."<ref>{{cite news |url=https://www.washingtonpost.com/news/post-politics/wp/2017/03/20/full-transcript-fbi-director-james-comey-testifies-on-russian-interference-in-2016-election/ |title=Full transcript: FBI Director James Comey testifies on Russian interference in 2016 election |access-date=2017-05-22 |archive-date=23 May 2017 |archive-url=https://web.archive.org/web/20170523113641/https://www.washingtonpost.com/news/post-politics/wp/2017/03/20/full-transcript-fbi-director-james-comey-testifies-on-russian-interference-in-2016-election/ |url-status=live }}</ref> Comey previously testified in January 2017 that a request for [[Federal Bureau of Investigation|FBI]] forensics investigators to access the DNC servers was denied, saying "Ultimately what was agreed to is the private company [CrowdStrike] would share with us what they saw."<ref>{{cite news |title=FBI Director Comey: Agency requested access to DNC server |url=https://www.cbsnews.com/news/fbi-director-comey-agency-requested-access-to-dnc-servers/ |work=CBS News |date=January 10, 2017}}</ref>

In December 2016, CrowdStrike released a report stating that Russian government-affiliated group [[Fancy Bear]] had hacked a Ukrainian artillery app.<ref>{{cite web |url=https://www.theverge.com/2016/12/23/14068992/russian-hack-dnc-ukraine-military-malware-crowdstrike |title=Russian hackers linked to DNC attack also targeted Ukrainian military, says report |website=theverge.com |date=2016-12-23 |access-date=2019-06-26 |archive-date=17 November 2019 |archive-url=https://web.archive.org/web/20191117011408/https://www.theverge.com/2016/12/23/14068992/russian-hack-dnc-ukraine-military-malware-crowdstrike |url-status=live }}</ref> They concluded that Russia had used the hack to cause large losses to Ukrainian artillery units.  The app (called ArtOS) is installed on tablet PCs and used for fire-control.<ref>{{Cite web|url=http://noosphereengineering.com/en/news/new-brainchild-of-engineering-school-was-tested-by-the-armed-forces|title=New brainchild of engineering school was tested by the armed forces|last=Noosphere engineering school|date=October 31, 2015|website=noosphereengineering.com|access-date=December 28, 2017|archive-date=29 December 2017|archive-url=https://web.archive.org/web/20171229052415/http://noosphereengineering.com/en/news/new-brainchild-of-engineering-school-was-tested-by-the-armed-forces|url-status=live}}</ref> CrowdStrike also found a hacked variation of POPR-D30 being distributed on Ukrainian military forums that utilized an [[X-Agent]] implant.<ref>{{Cite web|url=http://blog.crysys.hu/2017/01/technical-details-on-the-fancy-bear-android-malware-poprd30-apk|title=Technical details on the Fancy Bear Android malware (poprd30.apk)|last=Boldi|date=January 3, 2017|website=Laboratory of Cryptography and System Security, Budapest University of Technology and Economics|access-date=February 8, 2018|archive-date=9 February 2018|archive-url=https://web.archive.org/web/20180209063118/http://blog.crysys.hu/2017/01/technical-details-on-the-fancy-bear-android-malware-poprd30-apk/|url-status=live}}</ref>

The [[International Institute for Strategic Studies]] rejected CrowdStrike's assessment that claimed hacking caused losses to Ukrainian artillery units, saying that their data on Ukrainian D30 howitzer losses was misused in CrowdStrike's report. The Ukrainian Ministry of Defense also rejected the CrowdStrike report, stating that actual artillery losses were much smaller than what was reported by CrowdStrike and were not associated with Russian hacking.<ref>{{Cite news|url=https://www.voanews.com/a/crowdstrike-comey-russia-hack-dnc-clinton-trump/3776067.html|title=Think Tank: Cyber Firm at Center of Russian Hacking Charges Misread Data|last=Kuzmenko|first=Oleksiy|date=March 23, 2017|work=Voice of America|access-date=December 20, 2017|archive-date=20 January 2018|archive-url=https://web.archive.org/web/20180120231522/https://www.voanews.com/a/crowdstrike-comey-russia-hack-dnc-clinton-trump/3776067.html|url-status=live}}</ref> Prior to this, CrowdStrike had published a report claiming that malware used in Ukraine and against the [[Democratic National Committee]] (DNC) appeared to be unique and identical, further evidence for a Russian origin of the DNC attack.<ref>{{cite news |title=Group allegedly behind DNC hack targeted Ukraine, report finds |url=https://www.theguardian.com/technology/2016/dec/22/dnc-hack-crowdstrike-ukraine-malware-russia |work=The Guardian |date=22 December 2016}}</ref>

Cybersecurity firm SecureWorks discovered a list of email addresses targeted by Fancy Bear in phishing attacks. The list included the email address of Yaroslav Sherstyuk, the developer of ArtOS.<ref>{{Cite news|url=https://www.rferl.org/a/ukraine-russia-fancy-bear-hacking-artillery-guidance-app/28831564.html|title=Fancy Bear Tried To Hack E-Mail Of Ukrainian Making Artillery-Guidance App|last=Miller|first=Christopher|date=November 2, 2017|work=RadioFreeEurope|access-date=February 8, 2018|archive-date=6 February 2018|archive-url=https://web.archive.org/web/20180206040444/https://www.rferl.org/a/ukraine-russia-fancy-bear-hacking-artillery-guidance-app/28831564.html|url-status=live}}</ref> Additional [[Associated Press]] research supports CrowdStrike's conclusions about Fancy Bear.<ref>{{cite news |last1=Satter |first1=Raphael |title=Russia hackers pursued Putin foes, not just US Democrats |url=https://www.apnews.com/3bca5267d4544508bb523fa0db462cb2 |access-date=2 April 2019 |work=Associated Press |date=2 November 2017 |archive-date=2 April 2019 |archive-url=https://web.archive.org/web/20190402142500/https://www.apnews.com/3bca5267d4544508bb523fa0db462cb2 |url-status=live }}</ref> [[Radio Free Europe]] notes that the AP report "lends some credence to the original CrowdStrike report, showing that the app had, in fact, been targeted."<ref>{{cite news |last1=Miller |first1=Christopher |title='Fancy Bear' Tried To Hack E-Mail Of Ukrainian Making Artillery-Guidance App |url=https://www.rferl.org/a/ukraine-russia-fancy-bear-hacking-artillery-guidance-app/28831564.html |access-date=2 April 2019 |work=[[Radio Free Europe]]/[[Radio Liberty]] |date=2 November 2017 |archive-date=2 April 2019 |archive-url=https://web.archive.org/web/20190402142458/https://www.rferl.org/a/ukraine-russia-fancy-bear-hacking-artillery-guidance-app/28831564.html |url-status=live }}</ref>

In the [[Trump–Ukraine scandal]], [[Donald Trump]], then the [[president of the United States]], held a July 25, 2019, phone call with [[Volodymyr Zelensky]], the [[president of Ukraine]], in which Trump asked Zelensky to look into a conspiracy theory that was being promoted on [[far-right]] websites such as ''[[Breitbart News]]'' and Russian state media outlets such as [[RT (TV network)|Russia Today]] and [[Sputnik (news agency)|Sputnik]].<ref>{{cite web|first=Ryan|last=Broderick|url=https://www.buzzfeednews.com/article/ryanhatesthis/crowdstrike-4chan-qanon-conspiracy-theory|title=Here's How Donald Trump Ended Up Referencing A Russian-Promoted 4chan Conspiracy Theory In His Call To The Ukrainian President|website=[[Buzzfeed News]]|date=September 26, 2019|accessdate=February 11, 2024}}</ref> The theory held that namely, that the Ukrainian government used CrowdStrike to hack into the Democratic National Committee's servers in 2016 and frame Russia for the crime to undermine Trump in the [[U.S. presidential election, 2016|2016 presidential election]].<ref>{{cite news|first=Eileen|last=Sullivan|url=https://www.nytimes.com/2019/09/25/us/politics/crowdstrike-ukraine.html|title=How CrowdStrike Became Part of Trump's Ukraine Call|newspaper=[[The New York Times]]|date=September 25, 2019|accessdate=February 11, 2024}}</ref><ref>{{cite news|first=Joseph|last=Marks|url=https://www.washingtonpost.com/news/powerpost/paloma/the-cybersecurity-202/2019/09/26/the-cybersecurity-202-trump-s-crowdstrike-conspiracy-theory-shows-he-still-doubts-russian-election-interference/5d8ba0d088e0fa4b0ec245b7/|title=The Cybersecurity 202: Trump's CrowdStrike conspiracy theory shows he still doubts Russian election interference|newspaper=[[The Washington Post]]|date=September 26, 2019|accessdate=February 11, 2024}}</ref> The conspiracy theory has been repeatedly debunked.<ref>{{cite web|first=Frank|last=Bajak|url=https://apnews.com/article/23c9022665dc40a1a69e613459955112|title=Debunked Ukraine conspiracy theory is knocked down – again|work=[[Associated Press News]]|date=November 13, 2019|accessdate=February 11, 2024}}</ref><ref>{{cite web|first=Chris|last=Cillizza|authorlink=Chris Cillizza|url=https://www.cnn.com/2019/09/30/politics/crowdstrike-donald-trump-ukraine/index.html|title=Don't miss the totally debunked conspiracy theory Donald Trump pushed in the Ukraine call|website=[[CNN]]|date=September 30, 2019|accessdate=February 11, 2024}}</ref><ref>{{cite web|first=Ben|last=Collins|url=https://www.cnn.com/2019/09/30/politics/crowdstrike-donald-trump-ukraine/index.html|title=Trump seized on a conspiracy theory called the 'insurance policy.' Now, it's at the center of an impeachment investigation.|website=[[NBC News]]|date=October 3, 2019|accessdate=February 11, 2024}}</ref>

== Severe outage incidents ==
{{Main|2024 CrowdStrike incident}}CrowdStrike software has a history of causing serious outages on various platforms. At times these are fairly isolated, affecting a specific application<ref>{{Cite web |date=2022-08-03 |title=Crashes, possibly due to Crowdstrike Falcon Sensor |url=https://resource.dopus.com/t/crashes-possibly-due-to-crowdstrike-falcon-sensor/41852 |access-date=2024-07-22 |website=Directory Opus Resource Centre |language=en}}</ref><ref>{{Cite web |last=mati087 |date=2023-12-01 |title=BSOD caused by csagent.sys |url=http://www.reddit.com/r/crowdstrike/comments/18886ac/bsod_caused_by_csagentsys/ |access-date=2024-07-22 |website=r/crowdstrike}}</ref><ref>{{Cite web |date=2019-04-10 |title=Solved: CrowdStrike causes crashes |url=https://community.adobe.com/t5/download-install-discussions/solved-crowdstrike-causes-crashes/m-p/10392431#M63222 |access-date=2024-07-22 |website=https://community.adobe.com |language=en}}</ref> or operating system that is not as widely deployed as others.<ref>{{cite web |last1=Viswanathan |first1=Pradeep |title=CrowdStrike broke Debian and Rocky Linux months ago, but no one noticed |url=https://www.neowin.net/news/crowdstrike-broke-debian-and-rocky-linux-months-ago-but-no-one-noticed/ |website=Neowin |access-date=2024-07-22}}</ref> In some cases, these issues have caused serious outages that impacted servers across the world.

=== 2024 Debian Linux incident ===
On April 19, 2024, it was reported that a flawed software update pushed on a Friday evening was incompatible with up-to-date Debian Linux builds, despite being supported. A week later that caused all of the servers in the lab to crash and refuse to subsequently boot. When CrowdStrike was removed from the machine, it booted fine. CrowdStrike acknowledged the bug a day later and weeks later determined the root case.<ref>{{Cite web |last=C |first=Jack |date=2024-07-19 |title=Crowdstrike did this to our production linux fleet back on April 19th, and I've been dying to rant about it. |url=https://news.ycombinator.com/item?id=41005936 |url-status=live |archive-url=http://web.archive.org/web/20240722034855/https://news.ycombinator.com/item?id=41005936 |archive-date=2024-07-21 |access-date=2024-07-21 |website=Ycombinator}}</ref>

=== 2024 Linux incident ===
On May 13, 2024, it was reported that RockyLinux servers with CrowdStrike software may freeze after upgrading to RockyLinux 9.4.<ref>{{Cite web |date=2024-05-13 |title=Crowdstrike - freezing RockyLinux After 9.4 upgrade |url=https://forums.rockylinux.org/t/crowdstrike-freezing-rockylinux-after-9-4-upgrade/14041 |access-date=2024-07-22 |website=Rocky Linux Forum |language=en}}</ref> CrowdStrike reported that they were aware of the problem as it was the same issue due to a Linux Sensor in user mode combined with specific 6.x kernel versions.<ref>{{Cite web |url=https://supportportal.crowdstrike.com/s/article/Linux-Sensor-in-user-mode-may-fail-on-specific-6-x-kernel-versions |access-date=2024-07-22 |website=supportportal.crowdstrike.com}}</ref>[[File:CrowdStrike BSOD at LGA.jpg|thumb|287x287px|Multiple [[blue screens of death]], caused by an update pushed by CrowdStrike, on airport luggage conveyer belts at [[LaGuardia Airport]], [[New York City]]]]

=== 2024 Windows incident ===
On July 19, 2024, CrowdStrike released a software update to the [[vulnerability scanner]] Falcon Sensor. Flaws in the update caused [[Blue screen of death|blue screens of death]] on [[Microsoft Windows]] machines, disrupting millions of Windows computers worldwide.<ref>{{Cite web |last=Baran |first=Guru |date=19 July 2024 |title=CrowdStrike Update Pushing Windows Machines Into a BSOD Loop |url=https://cybersecuritynews.com/crowdstrike-update-bsod-loop/ |access-date=19 July 2024 |website=Cyber Security News |language=en-US}}</ref><ref name="register">{{cite web |last1=Sharwood |first1=Simon |title=CrowdStrike code update bricking Windows machines around the world |url=https://www.theregister.com/2024/07/19/crowdstrike_falcon_sensor_bsod_incident/ |access-date=19 July 2024 |website=The Register}}</ref> Affected machines were forced into a [[bootloop]], making them unusable. This was caused by an update to a configuration file, Channel File 291, which CrowdStrike says triggered a logic error and caused the operating system to crash.<ref>{{Cite web |last=CrowdStrike |date=2024-07-20 |title=Technical Details: Falcon Update for Windows Hosts {{!}} CrowdStrike |url=https://www.crowdstrike.com/blog/falcon-update-for-windows-hosts-technical-details/ |access-date=2024-07-20 |website=crowdstrike.com |language=en}}</ref> The downtime caused a widespread global impact, grounding commercial airline flights, temporarily taking [[Sky News]] and other broadcasters offline, and disrupting banking and healthcare services as well as [[911 (emergency telephone number)|911]] emergency call centers.<ref>{{Cite web |last=Godfrey |first=Paul |last2=Druker |first2=Simon |last3=Wynder |first3=Ehren |date=2024-07-19 |title=911 call centers back online after IT outage causes global chaos  |url=https://www.upi.com/Top_News/World-News/2024/07/19/IT-failure-hits-causes-chaos-around-world/2531721376791 |access-date=2024-07-19 |website=United Press International |language=en}}</ref><ref>{{Cite web |last=Warren |first=Tom |date=2024-07-19 |title=Major Windows BSOD issue takes banks, airlines, and broadcasters offline |url=https://www.theverge.com/2024/7/19/24201717/windows-bsod-crowdstrike-outage-issue |access-date=2024-07-19 |website=The Verge |language=en}}</ref>
By the end of the day, CrowdStrike shares closed trading at a price of $304.96, down 38.09 points or 11.10%.<ref>{{cite web |title=CrowdStrike Holdings Inc CRWD:NASDAQ |url=https://www.cnbc.com/quotes/CRWD |website=cnbc.com |publisher=cnbc.com |access-date=19 July 2024}}</ref>

Although CrowdStrike fixed the update, computers stuck in a bootloop were still unable to connect to the Internet to download the patch before Falcon can load in and crash the device again. The recommended solution from CrowdStrike was to boot into safe mode or Windows Recovery Mode and manually delete Channel File 291.<ref>{{Cite web |title=KB5042421: CrowdStrike issue impacting Windows endpoints causing an 0x50 or 0x7E error message on a blue screen - Microsoft Support |url=https://support.microsoft.com/en-us/topic/b1c700e0-7317-4e95-aeee-5d67dd35b92f |access-date=2024-07-20 |website=support.microsoft.com}}</ref> This requires local administrator access and if the device is encrypted by [[BitLocker|Bitlocker]] will also require a recovery key.<ref>{{Cite web |last=Warren |first=Tom |date=2024-07-19 |title=Here’s how IT admins are fixing the Windows Blue Screen of Death chaos |url=https://www.theverge.com/2024/7/19/24201806/microsoft-windows-bsod-pc-crashing-crowdstrike-fix |access-date=2024-07-20 |website=The Verge |language=en}}</ref> Microsoft has reported that some customers have been able to remediate the issue solely by rebooting impacted devices up to 15 times.<ref>{{Cite web |last=Warren |first=Tom |date=2024-07-19 |title=Microsoft on CrowdStrike outage: have you tried turning it off and on? (15 times) |url=https://www.theverge.com/2024/7/19/24201927/microsoft-crowdstrike-update-fix-turn-off-on-pc |access-date=2024-07-20 |website=The Verge |language=en}}</ref>

==See also==
* [[Operating system]]s
* [[Chinese intelligence activity abroad]]
* [[Chinese intelligence operations in the United States]]
* [[Timeline of Russian interference in the 2016 United States elections]]
* [[Timeline of investigations into Donald Trump and Russia (January–June 2017)]]

==References==
{{Reflist}}

==External links==
* {{Official website}}
* {{Finance links
| name = CrowdStrike Holdings, Inc.
| symbol = CRWD
| sec_cik = 1535527
| google = CRWD:NASDAQ
| yahoo = CRWD
| bloomberg = CRWD:US
| reuters = CRWD.O
}}

{{NASDAQ-100}}
[[Category:2011 establishments in California]]
[[Category:2019 initial public offerings]]
[[Category:American companies established in 2011]]
[[Category:Companies based in Austin, Texas]]
[[Category:Companies listed on the Nasdaq]]
[[Category:Computer security companies]]
[[Category:Internet technology companies of the United States]]
[[Category:Organizations associated with Russian interference in the 2016 United States elections]]
[[Category:Security companies of the United States]]
[[Category:Technology companies established in 2011]]
[[Category:Trump–Ukraine scandal]]
[[Category:Warburg Pincus companies]]


==See also==
* [[Operating system]]s
* [[Chinese intelligence activity abroad]]
* [[Chinese intelligence operations in the United States]]
* [[Timeline of Russian interference in the 2016 United States elections]]
* [[Timeline of investigations into Donald Trump and Russia (January–June 2017)]]

==References==
{{Reflist}}

==External links==
* {{Official website}}
* {{Finance links
| name = CrowdStrike Holdings, Inc.
| symbol = CRWD
| sec_cik = 1535527
| google = CRWD:NASDAQ
| yahoo = CRWD
| bloomberg = CRWD:US
| reuters = CRWD.O
}}

{{NASDAQ-100}}
[[Category:2011 establishments in California]]
[[Category:2019 initial public offerings]]
[[Category:American companies established in 2011]]
[[Category:Companies based in Austin, Texas]]
[[Category:Companies listed on the Nasdaq]]
[[Category:Computer security companies]]
[[Category:Internet technology companies of the United States]]
[[Category:Organizations associated with Russian interference in the 2016 United States elections]]
[[Category:Security companies of the United States]]
[[Category:Technology companies established in 2011]]
[[Category:Trump–Ukraine scandal]]
[[Category:Warburg Pincus companies]]