Hacked Company Loses Insurance Battle Over Customer Payment Scam
Hacked Company Loses Insurance Battle Over Customer Payment Scam
The information on this website is general in nature and does not take into account your objectives, financial situation, or needs. Consider seeking personal advice from a licensed adviser before acting on any information.
A company recently faced a significant setback after losing an insurance claim dispute related to funds stolen in a fraudulent email scheme.
Cybercriminals infiltrated the business's email system, sending out fake invoices that directed clients to pay into a bogus bank account.
Consequently, two customers inadvertently transferred a total of $66,148 to the fraudulent account.
Attempts to retrieve this money were unsuccessful, and the customers refused further payments to the company.
The company, holding a management liability insurance policy, sought to claim under its third-party crime coverage to recover the outstanding bills from the customers. However, AIG Australia denied the claim, stating that the policy only addressed "direct financial loss" from theft or fraud by a third party, and argued that since the stolen money belonged to customers, the business itself did not suffer a direct loss.
The Australian Financial Complaints Authority (AFCA) reviewed the case and acknowledged the company's loss. However, it determined that the loss did not align with the policy's specific terms. The ruling emphasized that only the company's customers faced direct financial loss, whereas the company experienced an indirect one due to subsequent non-payments.
The AFCA explained that the hack did not meet the company's policy definition of theft, as the stolen funds belonged to the customers, not the business. This discrepancy meant that the policy's electronic and computer crime coverage was not applicable. Additionally, the policy's criteria for "fraudulent act," which required acts of forgery or counterfeiting the insured had acted upon, were not met since the company was unaware of the false invoices.
This case highlights the critical distinction between direct and indirect financial losses in insurance claims, emphasizing the importance of understanding policy terms. For businesses, particularly those prone to cyber threats, it underscores the significance of having insurance coverage that appropriately addresses loss scenarios stemming from such events. It also serves as a cautionary tale of the complexities involved in recovering from cybercrime attacks without adequate protection.
Moving forward, businesses should ensure robust cybersecurity measures to prevent similar email hacks, coupled with clarifying insurance policies for adequate coverage against indirect financial losses as a result of customer fraud. This scenario may lead insurance providers to reevaluate their product offerings, potentially driving the development of more comprehensive cybercrime coverages. Additionally, the financial sector might witness increased discussions on how to formulate clearer policy definitions that align with the evolving nature of cyber threats.
Please Note: We do not endorse any specific products or companies. Some content is sourced from third parties, including press releases, and may not be independently verified for accuracy or completeness.
Recent industry reporting on the latest insurance complaints environment points to a clear message for Australian small businesses: the hardest part of insurance is often not buying a policy, but relying on it when something goes wrong. Disputes continue to arise around claim delays, declined claims, settlement amounts, policy exclusions and communication breakdowns between customers and insurers. - read more
Australian businesses are increasingly using AI tools to research products, shortlist providers and understand policy options. That convenience now comes with a clear warning for small business owners: not every insurance answer surfaced by AI search is coming from a licensed, accountable or locally relevant source. - read more
A reported data breach involving Lifeline Australia has renewed attention on a widening protection gap in the Australian cyber insurance market. While Lifeline has indicated that help-seeker and financial information were not compromised, the incident is a timely reminder that staff, volunteer, client and supplier data can still create serious legal, operational and reputational exposure for any organisation. - read more
New analysis released by the Insurance Council of Australia has put renewed attention on a major cost pressure for NSW businesses: the emergency services levy, commonly known as the ESL. The levy is currently collected through insurance premiums, meaning businesses that choose to insure their assets can face a higher cost for doing so. - read more
IAG’s latest investment through Firemark Ventures is a useful signal for Australian business owners: disaster recovery is no longer just about paying claims after the event. It is increasingly about helping people and enterprises stay operational, connected and on-site while rebuilding happens around them. - read more
In today's ever-evolving business landscape, risk management has become an essential practice for small business owners. With uncertainties ranging from economic fluctuations to natural disasters, being prepared for potential crises is more important than ever. As an owner, you must be proactive in identifying and mitigating risks to safeguard your business's future. - read more
Cyber security refers to the practices and technologies designed to protect computers, networks, programs, and data from unauthorized access, attacks, or damage. It's a crucial aspect of modern business operations, and understanding its importance is vital for all businesses, especially small ones. - read more
When it comes to securing the future of your business, insurance isn't just a safety net; it's a vital tool for stability and growth. As an Australian entrepreneur, navigating the complex world of business insurance can be daunting. That's why understanding the importance of choosing the right insurance cover for your venture is critical for success. - read more
Starting a new business venture is an exciting endeavor, but amid the myriad decisions start-up founders face, one must not overlook the importance of insurance. In today's digital-first world, the potential for cyber threats is a reality that can no longer be ignored by businesses of any size or sector, especially start-ups aiming to secure their future. - read more
Starting a new business is an exciting journey filled with opportunities and challenges. One of the most important parts of planning for a new venture is understanding how financing and insurance can work together to support a stronger financial foundation. - read more
Knowledgebase
Subrogation: An insurance carrier may reserve the "right of subrogation" in the event of a loss. This means that the company may choose to take action to recover the amount of a claim paid to a covered insured if the loss was caused by a third party.
No comments yet. Be the first to share your thoughts.