Hacked Company Loses Insurance Battle Over Customer Payment Scam
Hacked Company Loses Insurance Battle Over Customer Payment Scam
The information on this website is general in nature and does not take into account your objectives, financial situation, or needs. Consider seeking personal advice from a licensed adviser before acting on any information.
A company recently faced a significant setback after losing an insurance claim dispute related to funds stolen in a fraudulent email scheme.
Cybercriminals infiltrated the business's email system, sending out fake invoices that directed clients to pay into a bogus bank account.
Consequently, two customers inadvertently transferred a total of $66,148 to the fraudulent account.
Attempts to retrieve this money were unsuccessful, and the customers refused further payments to the company.
The company, holding a management liability insurance policy, sought to claim under its third-party crime coverage to recover the outstanding bills from the customers. However, AIG Australia denied the claim, stating that the policy only addressed "direct financial loss" from theft or fraud by a third party, and argued that since the stolen money belonged to customers, the business itself did not suffer a direct loss.
The Australian Financial Complaints Authority (AFCA) reviewed the case and acknowledged the company's loss. However, it determined that the loss did not align with the policy's specific terms. The ruling emphasized that only the company's customers faced direct financial loss, whereas the company experienced an indirect one due to subsequent non-payments.
The AFCA explained that the hack did not meet the company's policy definition of theft, as the stolen funds belonged to the customers, not the business. This discrepancy meant that the policy's electronic and computer crime coverage was not applicable. Additionally, the policy's criteria for "fraudulent act," which required acts of forgery or counterfeiting the insured had acted upon, were not met since the company was unaware of the false invoices.
This case highlights the critical distinction between direct and indirect financial losses in insurance claims, emphasizing the importance of understanding policy terms. For businesses, particularly those prone to cyber threats, it underscores the significance of having insurance coverage that appropriately addresses loss scenarios stemming from such events. It also serves as a cautionary tale of the complexities involved in recovering from cybercrime attacks without adequate protection.
Moving forward, businesses should ensure robust cybersecurity measures to prevent similar email hacks, coupled with clarifying insurance policies for adequate coverage against indirect financial losses as a result of customer fraud. This scenario may lead insurance providers to reevaluate their product offerings, potentially driving the development of more comprehensive cybercrime coverages. Additionally, the financial sector might witness increased discussions on how to formulate clearer policy definitions that align with the evolving nature of cyber threats.
Please Note: We do not endorse any specific products or companies. Some content is sourced from third parties, including press releases, and may not be independently verified for accuracy or completeness.
As Australia's insurance industry stands on the cusp of significant transformation, Deloitte's latest report, 'Insurance Predictions 2026,' offers a comprehensive analysis of the key trends poised to reshape the sector. The report underscores the imperative for insurers to adapt to rapid technological advancements, escalating climate risks, and evolving regulatory landscapes. - read more
The Australian Prudential Regulation Authority (APRA) has recently issued a cautionary statement regarding the elevated risks confronting the nation's insurance sector. This alert underscores the necessity for insurers to bolster their resilience against a backdrop of climate hazards, cyber incidents, and global geopolitical tensions. - read more
Australian private health insurance policyholders are set to experience a significant premium increase, with rates rising by an average of 4.41% from April 2026. This adjustment marks the most substantial hike since 2017, reflecting the escalating costs associated with medical and hospital services. - read more
The Australian insurance sector is currently witnessing a significant debate over the Insurance Council of Australia's (ICA) proposal to implement caps on legal fees associated with civil liability claims. This initiative aims to address the rising insurance premiums that have been a concern for small to medium business owners across the nation. - read more
In the dynamic landscape of the Australian insurance industry, a recent survey conducted by Gallagher Bassett has shed light on the primary challenges confronting insurers in 2026. The findings underscore a significant reshaping of priorities, with premium affordability, cybersecurity, and labour shortages emerging as the most pressing concerns. - read more
Business interruption insurance is a type of coverage designed to compensate businesses for lost income and operational costs when they are unable to operate due to a covered event such as a natural disaster, fire, or other incidents that disrupt business operations. - read more
When it comes to protecting the vitality and financial health of a growing business, insurance is a keystone. Yet, amidst the day-to-day hustle of driving your business forward, it's surprisingly easy to overlook the adequacy of your insurance policies - a misstep that can lead to the perilous state of underinsurance. In this article, we will delve into the essential knowledge and strategies to ensure your business is sufficiently covered, shielding it from unexpected setbacks and losses. - read more
Liability insurance is a crucial component of a business's risk management strategy. It provides protection against claims resulting from injuries and damages to people or property. Businesses of all sizes face potential risks daily, and this type of coverage is designed to shield businesses from significant financial losses. - read more
Cyber security refers to the practices and technologies designed to protect computers, networks, programs, and data from unauthorized access, attacks, or damage. It's a crucial aspect of modern business operations, and understanding its importance is vital for all businesses, especially small ones. - read more
Starting a new business is an exciting and challenging endeavor, particularly in the vibrant and innovative startup landscape of Australia. However, amidst the rush of ideas and the race to launch, many startups overlook the crucial aspect of insurance. Insurance is not merely an additional cost but a vital protective measure that safeguards your emerging business against unforeseen hurdles. - read more
Knowledgebase
Insurance Deductible: That part of an insurance claim that must be paid by an insured person before the the balance is paid by the insurer.