Hacked Company Loses Insurance Battle Over Customer Payment Scam

2

The company, holding a management liability insurance policy, sought to claim under its third-party crime coverage to recover the outstanding bills from the customers. However, AIG Australia denied the claim, stating that the policy only addressed "direct financial loss" from theft or fraud by a third party, and argued that since the stolen money belonged to customers, the business itself did not suffer a direct loss.

The Australian Financial Complaints Authority (AFCA) reviewed the case and acknowledged the company's loss. However, it determined that the loss did not align with the policy's specific terms. The ruling emphasized that only the company's customers faced direct financial loss, whereas the company experienced an indirect one due to subsequent non-payments.

The AFCA explained that the hack did not meet the company's policy definition of theft, as the stolen funds belonged to the customers, not the business. This discrepancy meant that the policy's electronic and computer crime coverage was not applicable. Additionally, the policy's criteria for "fraudulent act," which required acts of forgery or counterfeiting the insured had acted upon, were not met since the company was unaware of the false invoices.

This case highlights the critical distinction between direct and indirect financial losses in insurance claims, emphasizing the importance of understanding policy terms. For businesses, particularly those prone to cyber threats, it underscores the significance of having insurance coverage that appropriately addresses loss scenarios stemming from such events. It also serves as a cautionary tale of the complexities involved in recovering from cybercrime attacks without adequate protection.

Moving forward, businesses should ensure robust cybersecurity measures to prevent similar email hacks, coupled with clarifying insurance policies for adequate coverage against indirect financial losses as a result of customer fraud. This scenario may lead insurance providers to reevaluate their product offerings, potentially driving the development of more comprehensive cybercrime coverages. Additionally, the financial sector might witness increased discussions on how to formulate clearer policy definitions that align with the evolving nature of cyber threats.

Published:Tuesday, 11th Mar 2025
Source: Paige Estritori

Share this news item:

Insurance News

Clear

Insurance Council Urges Action on Risk Reduction as Election Approaches 02 Apr 2025: Paige Estritori Prime Minister Anthony Albanese has announced a federal election set for May 3, positioning the Insurance Council of Australia (ICA) to leverage this political moment to advocate vigorously for enhanced risk reduction measures. The ICA is calling for substantial investment in mitigation strategies to address pressing issues of insurance affordability and resilience against natural disasters. - read more

Allianz and AWP Face Hefty Penalties for Misleading Insurance Claims 01 Apr 2025: Paige Estritori The Supreme Court of New South Wales has imposed significant criminal penalties on Allianz Australia Insurance Ltd and AWP Australia Pty Ltd. Allianz received a $13.5 million fine, while AWP was fined $3.3 million. These penalties were for falsely or misleadingly promoting financial products online, breaching sections 1041E(1) and 1311(1) of the Corporations Act 2001. - read more

AFCA Rules in Favour of Owners in Lift Vandalism Dispute 28 Mar 2025: Paige Estritori In a landmark decision, the Australian Financial Complaints Authority (AFCA) has mandated that Chubb Insurance replace the hoist ropes of two lifts in an apartment block, following damage attributed to vandalism. The owners' corporation successfully argued that the damage to the lifts was part of a previously recognized vandalism incident. - read more

NSW Government Targets Predatory Practice of Claim Farming 28 Mar 2025: Paige Estritori The New South Wales Government is taking decisive action against 'claim farming', a predatory practice that exploits vulnerable individuals by pressuring them to file compensation claims. This practice often involves unethical tactics targeting susceptible groups, including child abuse survivors. To combat this, the government is set to introduce the Claim Farming Practices Prohibition Bill 2025. - read more

RAA Partners with Duck Creek for Major Tech Overhaul 27 Mar 2025: Paige Estritori The Royal Automobile Association (RAA), a leading motoring group in South Australia, is set to revamp its technology infrastructure by adopting Duck Creek's OnDemand cloud platform. This strategic transition will see RAA's outdated systems for motor and home insurance transformed to include streamlined policy, rating, billing, and claims management, as well as enhanced data handling and insights capabilities. - read more