Delta Air Lines Inc

ITEM 1A. RISK FACTORS

Item 1A. Risk Factors of our Form 10-K includes a discussion of our known material risk factors, other than risks that could apply to any issuer or offering. There ha information presented below updates, and should be read in conjunction with, the risk factors and information disclosed in our Form 10-K. Except as presented below, there have been no material changes from the risk factors described in our Form 10-K.

Disruptions of our information technology infrastructure could interfere with our operations, possibly having a material adverse effect on our business.

Disruptions in our information technology capability could result from a technology error or failure impacting our internal systems, whether hosted internally at our data centers or externally at third-party locations, or large-scale external interruption in technology infrastructure support on which we depend, such as power, telecommunications or the internet. The operation of our technology systems and the use of related data may also be vulnerable to a variety of other sources of interruption, including natural disasters, terrorist attacks, computer viruses, hackers and other security issues. A significant individual, sustained or repeated failure of our information technology infrastructure, including third-party networks, software-as-a-service applications, cloud services, or technology that we utilize and on which we depend, could impact our operations and our customer service, result in loss of revenue, increased costs and damage our reputation. While we have initiatives and disaster recovery plans in place to prevent or mitigate disruptions, we recently experienced a global outage caused by a faulty update by cybersecurity vendor CrowdStrike in July 2024 that resulted in global information technology outages of Windows-based systems. The faulty software update significantly affected our information technology systems, disrupting our operations. The operational disruption resulted in flight delays and approximately 7,000 cancellations of Delta flights over five days, impacting 1.4 million customers. The CrowdStrike-caused outage and resulting operational disruption adversely impacted our results of operations as discussed in more detail in Item 7. Management's Discussion and Analysis. While we continue to invest in improvements to our preventative initiatives and disaster recovery plans, the measures we have in place may not be adequate to prevent future business disruptions and any material adverse financial and reputational consequences to our business.

Item 1A. Risk Factors

Failure of the technology we use to perform effectively could have a material adverse effect on our business.

We are dependent on technology initiatives and capabilities to provide customer service and operational effectiveness in order to compete in the current business environment. For example, substantially all of our tickets are issued to our customers as electronic tickets, and a growing number of our customers check in using our website, airport kiosks and our FlyDelta mobile application. We have made and continue to make significant investments in customer facing technology such as delta.com, the FlyDelta mobile application, in-flight wireless internet, check-in kiosks, customer service applications, application of biometric technology, airport information displays and related initiatives, including security for these initiatives. We are also investing in significant upgrades to technology infrastructure and other supporting systems and transitioning to cloud-based technologies. The performance, reliability and security of the technology we use are critical to our ability to serve customers. If this technology does not perform effectively, including as a result of the implementation or integration of new or upgraded technologies or systems, our business and operations can be negatively affected, which could be material. As discussed above, the faulty CrowdStrike software update that resulted in global information technology outages of Windows-based systems in July 2024 significantly affected our information technology systems, disrupting our operations. The operational disruption resulted in flight delays and approximately 7,000 cancellations of Delta flights over five days, impacting 1.4 million customers. Additional failures of the technology we use or depend on could expose us to liability, disrupt our business and damage our reputation in the future.