Hacked Company Loses Insurance Battle Over Customer Payment Scam

2

The information on this website is general in nature and does not take into account your objectives, financial situation, or needs. Consider seeking personal advice from a licensed adviser before acting on any information.

The company, holding a management liability insurance policy, sought to claim under its third-party crime coverage to recover the outstanding bills from the customers. However, AIG Australia denied the claim, stating that the policy only addressed "direct financial loss" from theft or fraud by a third party, and argued that since the stolen money belonged to customers, the business itself did not suffer a direct loss.

The Australian Financial Complaints Authority (AFCA) reviewed the case and acknowledged the company's loss. However, it determined that the loss did not align with the policy's specific terms. The ruling emphasized that only the company's customers faced direct financial loss, whereas the company experienced an indirect one due to subsequent non-payments.

The AFCA explained that the hack did not meet the company's policy definition of theft, as the stolen funds belonged to the customers, not the business. This discrepancy meant that the policy's electronic and computer crime coverage was not applicable. Additionally, the policy's criteria for "fraudulent act," which required acts of forgery or counterfeiting the insured had acted upon, were not met since the company was unaware of the false invoices.

This case highlights the critical distinction between direct and indirect financial losses in insurance claims, emphasizing the importance of understanding policy terms. For businesses, particularly those prone to cyber threats, it underscores the significance of having insurance coverage that appropriately addresses loss scenarios stemming from such events. It also serves as a cautionary tale of the complexities involved in recovering from cybercrime attacks without adequate protection.

Moving forward, businesses should ensure robust cybersecurity measures to prevent similar email hacks, coupled with clarifying insurance policies for adequate coverage against indirect financial losses as a result of customer fraud. This scenario may lead insurance providers to reevaluate their product offerings, potentially driving the development of more comprehensive cybercrime coverages. Additionally, the financial sector might witness increased discussions on how to formulate clearer policy definitions that align with the evolving nature of cyber threats.

Published:Tuesday, 11th Mar 2025
Source: Paige Estritori

Please Note: If this information affects you, seek advice from a licensed professional.

Share this news item:

Insurance News

Clear

AustralianSuper Announces Reduction in Default Income Protection Cover

20 Feb 2026: Paige Estritori

AustralianSuper, one of Australia's largest superannuation funds, has announced a significant change to its default income protection insurance. Effective from 28 February 2026, the fund will reduce the default income protection cover to $1,000 per month. This adjustment aims to align insurance coverage with members' actual income levels and prevent over-insurance, which can erode retirement savings. - read more

APRA Postpones Changes to Individual Disability Income Insurance Policy Terms

20 Feb 2026: Paige Estritori

The Australian Prudential Regulation Authority (APRA) has announced a suspension of the planned changes to individual disability income insurance (IDII) policy contract terms. Originally set to take effect from 1 October 2022, the implementation has been deferred for at least two years, providing insurers and policyholders additional time to adapt to the forthcoming regulations. - read more

AFCA Upholds Policyholder's Income Protection Benefits Against Zurich

12 Feb 2026: Paige Estritori

The Australian Financial Complaints Authority (AFCA) has recently ruled against Zurich Insurance, instructing the insurer to maintain the current income protection benefits for a policyholder after an 11-year delay in proposing a reduction. This decision underscores the critical importance of timely and transparent communication between insurers and their clients. - read more

Neos Recognized as Leading Income Protection Insurer in 2025

12 Feb 2026: Paige Estritori

In the 2025 Life Insurance Awards presented by Money Magazine, Neos has been honored as the top provider in the Income Protection Insurance category. This accolade reflects Neos's commitment to delivering comprehensive and reliable income protection solutions to Australians. - read more

TAL's Health Sense Plus Now Covers Income Protection Policies

04 Feb 2026: Paige Estritori

In a significant development for policyholders, TAL has expanded its Health Sense Plus program to encompass income protection (IP) policies. This initiative, effective from August 8, 2025, aims to incentivise proactive health management by offering premium discounts to clients who engage in preventative health checks. - read more

Surge in Mental Health Claims Puts Pressure on Australia's Insurance Industry

04 Feb 2026: Paige Estritori

Australia's insurance sector is facing unprecedented challenges as mental health conditions have become the leading cause of total and permanent disability (TPD) claims. Recent data from the Council of Australian Life Insurers (CALI) reveals that mental health issues now account for nearly one-third of all TPD claims paid out. - read more

Click for more Insurance News