Hacked Company Loses Insurance Battle Over Customer Payment Scam
Hacked Company Loses Insurance Battle Over Customer Payment Scam
The information on this website is general in nature and does not take into account your objectives, financial situation, or needs. Consider seeking personal advice from a licensed adviser before acting on any information.
A company recently faced a significant setback after losing an insurance claim dispute related to funds stolen in a fraudulent email scheme.
Cybercriminals infiltrated the business's email system, sending out fake invoices that directed clients to pay into a bogus bank account.
Consequently, two customers inadvertently transferred a total of $66,148 to the fraudulent account.
Attempts to retrieve this money were unsuccessful, and the customers refused further payments to the company.
The company, holding a management liability insurance policy, sought to claim under its third-party crime coverage to recover the outstanding bills from the customers. However, AIG Australia denied the claim, stating that the policy only addressed "direct financial loss" from theft or fraud by a third party, and argued that since the stolen money belonged to customers, the business itself did not suffer a direct loss.
The Australian Financial Complaints Authority (AFCA) reviewed the case and acknowledged the company's loss. However, it determined that the loss did not align with the policy's specific terms. The ruling emphasized that only the company's customers faced direct financial loss, whereas the company experienced an indirect one due to subsequent non-payments.
The AFCA explained that the hack did not meet the company's policy definition of theft, as the stolen funds belonged to the customers, not the business. This discrepancy meant that the policy's electronic and computer crime coverage was not applicable. Additionally, the policy's criteria for "fraudulent act," which required acts of forgery or counterfeiting the insured had acted upon, were not met since the company was unaware of the false invoices.
This case highlights the critical distinction between direct and indirect financial losses in insurance claims, emphasizing the importance of understanding policy terms. For businesses, particularly those prone to cyber threats, it underscores the significance of having insurance coverage that appropriately addresses loss scenarios stemming from such events. It also serves as a cautionary tale of the complexities involved in recovering from cybercrime attacks without adequate protection.
Moving forward, businesses should ensure robust cybersecurity measures to prevent similar email hacks, coupled with clarifying insurance policies for adequate coverage against indirect financial losses as a result of customer fraud. This scenario may lead insurance providers to reevaluate their product offerings, potentially driving the development of more comprehensive cybercrime coverages. Additionally, the financial sector might witness increased discussions on how to formulate clearer policy definitions that align with the evolving nature of cyber threats.
Please Note: We do not endorse any specific products or companies. Some content is sourced from third parties, including press releases, and may not be independently verified for accuracy or completeness.
Lithium-ion batteries are moving from a workplace convenience to a serious insurance consideration for Australian small and medium businesses. As more businesses rely on rechargeable tools, e-bikes, scooters, point-of-sale devices, backup power units and portable electronics, insurers are paying closer attention to how those items are stored, charged and managed. - read more
Fresh industry updates on severe weather claims are a reminder that storm, flood and cyclone losses are no longer rare planning scenarios for Australian small and medium businesses. Claims linked to major weather systems affecting Queensland and New South Wales continue to move through insurer assessment, repair and settlement processes, with businesses facing familiar pressure points: damaged premises, interrupted trading, ruined stock, delayed repairs and uncertainty about what is actually covered. - read more
Australia's mandatory ransomware payment reporting regime is now a practical compliance issue for many business owners, not just a technology concern. Under the national cyber security reforms, entities above the relevant annual turnover threshold must report certain ransomware and cyber extortion payments within a short statutory timeframe. For SMEs operating close to, or above, that threshold, the change adds another layer to an already complex risk environment. - read more
Latest general insurance performance data from APRA points to an industry that remains financially resilient, with insurers benefiting from disciplined underwriting, investment income and a continued focus on pricing risk accurately. For Australian small and medium-sized businesses, that is useful context heading into renewal season, but it should not be read as a simple promise of cheaper premiums. - read more
Recent industry reporting on the latest insurance complaints environment points to a clear message for Australian small businesses: the hardest part of insurance is often not buying a policy, but relying on it when something goes wrong. Disputes continue to arise around claim delays, declined claims, settlement amounts, policy exclusions and communication breakdowns between customers and insurers. - read more
As a labour hire firm, it is important to assess your insurance needs to protect your business from the risks it faces. Assessing your insurance needs involves identifying potential risks specific to your industry and taking steps to mitigate them. With the right coverage, you can protect your employees, clients, and business assets from unforeseeable circumstances, which could otherwise result in costly lawsuits or accidents. - read more
Business interruption insurance is a type of coverage designed to compensate businesses for lost income and operational costs when they are unable to operate due to a covered event such as a natural disaster, fire, or other incidents that disrupt business operations. - read more
When it comes to securing the future of your business, insurance isn't just a safety net; it's a vital tool for stability and growth. As an Australian entrepreneur, navigating the complex world of business insurance can be daunting. That's why understanding the importance of choosing the right insurance cover for your venture is critical for success. - read more
Running a business in Australia comes with its own unique set of challenges and rewards. One of the most crucial aspects of ensuring your business thrives is having comprehensive insurance in place. But what exactly does 'comprehensive insurance' mean for your business? - read more
Running a retail business can be a risky endeavor. While you can minimize some of those risks with careful planning and management, you cannot eliminate them entirely. This is where insurance comes in. Having the right kind and amount of insurance coverage can make all the difference in protecting your business from financial loss, should the unthinkable happen. - read more
Knowledgebase
Trauma Insurance: An insurance that pays a lump-sum amount on the diagnosis of one of several critical illnesses or events
No comments yet. Be the first to share your thoughts.