On Friday, September 25, 2026, federal prosecutors handed CrowdStrike what should have been good news. Reports said the Justice Department had wrapped up its investigation into CrowdStrike’s commercial arrangements involving a distributor and decided not to pursue enforcement actions. Shares fell anyway, dropping about 2.9% on the day.
That reaction deserves more attention than the headline did.
What the Investigation Was Actually About
The investigation centered on a $32 million deal completed in 2023 with distributor Carahsoft Technology Corp. tied to cybersecurity software for the IRS. Bloomberg previously reported in October 2024 that although Carahsoft made on-time payments to CrowdStrike, the IRS never actually bought the products.
Some CrowdStrike personnel raised internal concerns at the time because the deal closed on the final day of a fiscal quarter, questioning whether the transaction was truly complete given the uncertainty around the IRS’s ultimate purchase.
According to the reporting on September 25, 2026, prosecutors closed the matter without charges and without a civil case.
The Risk That Remains
One piece of the legal cloud has not lifted. While federal prosecutors have closed their file, it remains unclear whether a parallel SEC inquiry has also been terminated. In its most recent quarterly filing (filed August 27, 2026), CrowdStrike said it had received requests for information from both the DOJ and the SEC relating to revenue recognition and the reporting of annual recurring revenue for transactions with certain customers, and that it continued to cooperate.
The SEC’s posture has not been publicly updated, and the commission tends to move on its own timeline regardless of what prosecutors decide.
That is a real and unresolved risk. Anyone buying CRWD on the DOJ news is not buying into a fully clean regulatory picture. They are buying into a materially cleaner one, with a specific tail that still needs to run its course.
The Business Underneath the Legal Noise
Whatever the SEC ultimately decides, CrowdStrike’s operating momentum has been running well ahead of the controversy. In its fiscal second-quarter 2027 results (reported August 26, 2026), CrowdStrike posted revenue of $1.47 billion, up 26% year over year, and guided full-year revenue to about $6.0 billion (roughly $5.99 billion to $6.01 billion).
The broader spending backdrop is also supportive, even if the exact dollar figure is easy to overstate. Gartner’s most recent published forecast points to worldwide information security end-user spending reaching about $244 billion in 2026.
CRWD hit an intraday all-time high of $263.87 on September 24, 2026, the day before the DOJ news surfaced. The fact that shares pulled back on a favorable legal development suggests the market was more interested in taking profits near a record than in revaluing the risk that just cleared.
What Could Still Go Wrong
Valuation is the sharpest counterargument. The draft’s specific insider-selling total could not be verified from primary filings in a consistent way, but the direction is clear: recent Form 4 activity shows substantial net insider selling and no meaningful offsetting insider buying. That pattern, in the middle of a run to record highs, is worth registering.
The SEC investigation, unresolved as of September 27, 2026, could still produce findings that reopen questions about revenue recognition. And at a market cap of roughly $258 billion (based on recent pricing), the stock already assumes a long runway of strong execution.
The Bottom Line
The DOJ outcome removes the more serious of the two legal overhangs, the one involving potential criminal exposure. The SEC question lingers. Yet the stock’s failure to rally on genuinely good legal news suggests the market had already moved on to other concerns, chiefly valuation and insider selling at record prices.
For investors who believe in the underlying cybersecurity demand cycle, that combination, cleared criminal exposure, strong earnings momentum, sector tailwinds, and a share price that shrugged at positive news, creates an asymmetry worth considering. The risk did shrink on Friday. The price just hasn’t agreed yet.
