Hacked Company Loses Insurance Battle Over Customer Payment Scam
Hacked Company Loses Insurance Battle Over Customer Payment Scam
The information on this website is general in nature and does not take into account your objectives, financial situation, or needs. Consider seeking personal advice from a licensed adviser before acting on any information.
A company recently faced a significant setback after losing an insurance claim dispute related to funds stolen in a fraudulent email scheme.
Cybercriminals infiltrated the business's email system, sending out fake invoices that directed clients to pay into a bogus bank account.
Consequently, two customers inadvertently transferred a total of $66,148 to the fraudulent account.
Attempts to retrieve this money were unsuccessful, and the customers refused further payments to the company.
The company, holding a management liability insurance policy, sought to claim under its third-party crime coverage to recover the outstanding bills from the customers. However, AIG Australia denied the claim, stating that the policy only addressed "direct financial loss" from theft or fraud by a third party, and argued that since the stolen money belonged to customers, the business itself did not suffer a direct loss.
The Australian Financial Complaints Authority (AFCA) reviewed the case and acknowledged the company's loss. However, it determined that the loss did not align with the policy's specific terms. The ruling emphasized that only the company's customers faced direct financial loss, whereas the company experienced an indirect one due to subsequent non-payments.
The AFCA explained that the hack did not meet the company's policy definition of theft, as the stolen funds belonged to the customers, not the business. This discrepancy meant that the policy's electronic and computer crime coverage was not applicable. Additionally, the policy's criteria for "fraudulent act," which required acts of forgery or counterfeiting the insured had acted upon, were not met since the company was unaware of the false invoices.
This case highlights the critical distinction between direct and indirect financial losses in insurance claims, emphasizing the importance of understanding policy terms. For businesses, particularly those prone to cyber threats, it underscores the significance of having insurance coverage that appropriately addresses loss scenarios stemming from such events. It also serves as a cautionary tale of the complexities involved in recovering from cybercrime attacks without adequate protection.
Moving forward, businesses should ensure robust cybersecurity measures to prevent similar email hacks, coupled with clarifying insurance policies for adequate coverage against indirect financial losses as a result of customer fraud. This scenario may lead insurance providers to reevaluate their product offerings, potentially driving the development of more comprehensive cybercrime coverages. Additionally, the financial sector might witness increased discussions on how to formulate clearer policy definitions that align with the evolving nature of cyber threats.
Please Note: We do not endorse any specific products or companies. Some content is sourced from third parties, including press releases, and may not be independently verified for accuracy or completeness.
A new Insurance Brokers Code of Practice has been launched by the National Insurance Brokers Association, putting clearer disclosure, renewal contact and client support standards on the agenda for Australian businesses that use brokers to arrange cover. The 2027 Code takes effect on 1 January 2027 and is designed to set out, in plainer language, what clients should be able to expect from subscribing insurance brokers. - read more
Renewed debate around proposed changes to the NSW workers compensation system is a timely reminder that employee injury cover is not a set-and-forget obligation for business owners. While the details of reform are still being scrutinised by government, regulators, unions, employers and insurers, the underlying issue is clear: claims costs, psychological injury trends and scheme sustainability are placing pressure on how workplace injury risk is funded and managed. - read more
Fresh industry attention on cyber underinsurance is a timely reminder that many Australian small and medium businesses are still treating digital risk as an IT problem rather than a balance sheet risk. As more trading, payments, customer records, bookings and supplier relationships move online, a cyber incident can quickly become a cash flow, legal, operational and reputational event. - read more
Fresh industry attention on disaster resilience is a timely reminder that Australian small and medium businesses cannot treat severe weather as an occasional inconvenience. The message emerging from the insurance sector is increasingly consistent: premiums, availability of cover and claims outcomes are being shaped not only by what a business owns, but by where it operates, how exposed it is, and what practical risk controls are in place. - read more
Lithium-ion batteries are moving from a workplace convenience to a serious insurance consideration for Australian small and medium businesses. As more businesses rely on rechargeable tools, e-bikes, scooters, point-of-sale devices, backup power units and portable electronics, insurers are paying closer attention to how those items are stored, charged and managed. - read more
Starting a new business is an exciting and challenging endeavor, particularly in the vibrant and innovative startup landscape of Australia. However, amidst the rush of ideas and the race to launch, many startups overlook the crucial aspect of insurance. Insurance is not merely an additional cost but a vital protective measure that safeguards your emerging business against unforeseen hurdles. - read more
For small businesses, navigating the intricacies of sustainability is a critical task that can be made more manageable through the prudent use of business insurance. Understandably, many small business owners prioritize immediate operational concerns over seemingly discrete matters like insurance. However, as we will explore, insurance is not a mere formality—it's a vital backbone to enduring success. - read more
Running a retail business can be a risky endeavor. While you can minimize some of those risks with careful planning and management, you cannot eliminate them entirely. This is where insurance comes in. Having the right kind and amount of insurance coverage can make all the difference in protecting your business from financial loss, should the unthinkable happen. - read more
In today's ever-evolving business landscape, risk management has become an essential practice for small business owners. With uncertainties ranging from economic fluctuations to natural disasters, being prepared for potential crises is more important than ever. As an owner, you must be proactive in identifying and mitigating risks to safeguard your business's future. - read more
Insurance costs can be a significant expense for businesses in Australia, and it is crucial to understand how they can affect your bottom line. With premiums on the rise, many business owners are looking for ways to cut costs while maintaining the coverage they need to protect their operations. - read more
Knowledgebase
Grace Period: A set amount of time after the premium is due during which a policyholder can make a payment without the insurance coverage lapsing.
No comments yet. Be the first to share your thoughts.