Hacked Company Loses Insurance Battle Over Customer Payment Scam
Hacked Company Loses Insurance Battle Over Customer Payment Scam
The information on this website is general in nature and does not take into account your objectives, financial situation, or needs. Consider seeking personal advice from a licensed adviser before acting on any information.
A company recently faced a significant setback after losing an insurance claim dispute related to funds stolen in a fraudulent email scheme.
Cybercriminals infiltrated the business's email system, sending out fake invoices that directed clients to pay into a bogus bank account.
Consequently, two customers inadvertently transferred a total of $66,148 to the fraudulent account.
Attempts to retrieve this money were unsuccessful, and the customers refused further payments to the company.
The company, holding a management liability insurance policy, sought to claim under its third-party crime coverage to recover the outstanding bills from the customers. However, AIG Australia denied the claim, stating that the policy only addressed "direct financial loss" from theft or fraud by a third party, and argued that since the stolen money belonged to customers, the business itself did not suffer a direct loss.
The Australian Financial Complaints Authority (AFCA) reviewed the case and acknowledged the company's loss. However, it determined that the loss did not align with the policy's specific terms. The ruling emphasized that only the company's customers faced direct financial loss, whereas the company experienced an indirect one due to subsequent non-payments.
The AFCA explained that the hack did not meet the company's policy definition of theft, as the stolen funds belonged to the customers, not the business. This discrepancy meant that the policy's electronic and computer crime coverage was not applicable. Additionally, the policy's criteria for "fraudulent act," which required acts of forgery or counterfeiting the insured had acted upon, were not met since the company was unaware of the false invoices.
This case highlights the critical distinction between direct and indirect financial losses in insurance claims, emphasizing the importance of understanding policy terms. For businesses, particularly those prone to cyber threats, it underscores the significance of having insurance coverage that appropriately addresses loss scenarios stemming from such events. It also serves as a cautionary tale of the complexities involved in recovering from cybercrime attacks without adequate protection.
Moving forward, businesses should ensure robust cybersecurity measures to prevent similar email hacks, coupled with clarifying insurance policies for adequate coverage against indirect financial losses as a result of customer fraud. This scenario may lead insurance providers to reevaluate their product offerings, potentially driving the development of more comprehensive cybercrime coverages. Additionally, the financial sector might witness increased discussions on how to formulate clearer policy definitions that align with the evolving nature of cyber threats.
Please Note: We do not endorse any specific products or companies. Some content is sourced from third parties, including press releases, and may not be independently verified for accuracy or completeness.
A federal parliamentary inquiry into small business insurance has pushed its reporting timetable into early 2027, extending the wait for recommendations that may shape future debate on affordability, availability and regulation. For Australian tradespeople, the delay matters because the inquiry is examining the commercial insurance lines many small operators rely on daily, including public liability, professional indemnity, cyber risk and business interruption cover. - read more
Australia’s fast-growing data centre construction market is opening opportunities for electrical, HVAC, fire protection, cabling, fit-out and commissioning trades, but recent insurance industry discussion suggests the risk settings are not always keeping pace with the work. At a recent Australasian Professional Indemnity Group conference, specialists warned that data centre projects can involve unusual contractual, professional and technology-related exposures, especially where contractors rely on annual insurance programs designed for more conventional building work. - read more
Fresh small business cyber warnings are a practical reminder that digital risk is no longer just a concern for large companies with complex IT systems. For Australian tradespeople, the most damaging cyber incident may be far simpler: a fake invoice, altered bank details, a compromised email account or a scam message that looks like it came from a supplier, builder, real estate agent or client. - read more
As a tradesperson, having comprehensive insurance coverage is crucial. Whether you are a carpenter, electrician, plumber, or any other trades professional, the nature of your work exposes you to various risks. Insurance not only protects you but also your clients and your business. - read more
Australian tradies, including plumbers, electricians, builders and carpenters, face risks that can vary widely by trade, worksite and equipment. Tailored insurance is about matching cover to the practical risks of the work, rather than relying on a one-size-fits-all policy. - read more
Australian tradies work across client homes, building sites, vehicles and workshops, often with tools, equipment and physical risks involved. The right mix of insurance can vary by trade, business structure and the type of work performed, but several cover types are commonly considered by tradespeople who want to manage third-party liability, income interruption and asset risks. - read more
Knowledgebase
Loss Ratio: The ratio of claims paid by an insurer to the premiums earned, used as a measure of profitability.
No comments yet. Be the first to share your thoughts.