Hacked Company Loses Insurance Battle Over Customer Payment Scam

The information on this website is general in nature and does not take into account your objectives, financial situation, or needs. Consider seeking personal advice from a licensed adviser before acting on any information.

The company, holding a management liability insurance policy, sought to claim under its third-party crime coverage to recover the outstanding bills from the customers. However, AIG Australia denied the claim, stating that the policy only addressed "direct financial loss" from theft or fraud by a third party, and argued that since the stolen money belonged to customers, the business itself did not suffer a direct loss.

The Australian Financial Complaints Authority (AFCA) reviewed the case and acknowledged the company's loss. However, it determined that the loss did not align with the policy's specific terms. The ruling emphasized that only the company's customers faced direct financial loss, whereas the company experienced an indirect one due to subsequent non-payments.

The AFCA explained that the hack did not meet the company's policy definition of theft, as the stolen funds belonged to the customers, not the business. This discrepancy meant that the policy's electronic and computer crime coverage was not applicable. Additionally, the policy's criteria for "fraudulent act," which required acts of forgery or counterfeiting the insured had acted upon, were not met since the company was unaware of the false invoices.

This case highlights the critical distinction between direct and indirect financial losses in insurance claims, emphasizing the importance of understanding policy terms. For businesses, particularly those prone to cyber threats, it underscores the significance of having insurance coverage that appropriately addresses loss scenarios stemming from such events. It also serves as a cautionary tale of the complexities involved in recovering from cybercrime attacks without adequate protection.

Moving forward, businesses should ensure robust cybersecurity measures to prevent similar email hacks, coupled with clarifying insurance policies for adequate coverage against indirect financial losses as a result of customer fraud. This scenario may lead insurance providers to reevaluate their product offerings, potentially driving the development of more comprehensive cybercrime coverages. Additionally, the financial sector might witness increased discussions on how to formulate clearer policy definitions that align with the evolving nature of cyber threats.

Published:Tuesday, 11th Mar 2025
Author: Paige Estritori

Please Note: We do not endorse any specific products or companies. Some content is sourced from third parties, including press releases, and may not be independently verified for accuracy or completeness.

Share this news item:

Insurance News

Clear

AFCA Decision Highlights Limits on Recovering Income Protection Payments

22 Jul 2026: Paige Estritori

A new Australian Financial Complaints Authority decision has offered an important reminder for anyone relying on income protection insurance through work or super: once benefits have been paid, an insurer generally needs a strong and clearly evidenced basis before asking for that money back. - read more

Why Commission Earners Should Check Their Income Protection Wording

15 Jul 2026: Paige Estritori

A recent Australian Financial Complaints Authority decision has put an important issue in focus for sales staff, recruiters, account managers and other workers whose income depends partly on commission. The dispute involved a policyholder covered under an employer’s group income protection arrangement with MetLife. After a work-related mental health injury, he claimed on the policy, but his commission earnings were left out when his pre-disability income was calculated. - read more

What the Life Code Review Could Mean for Mental Health Claims

08 Jul 2026: Paige Estritori

The latest review of the Life Insurance Code of Practice has put mental health cover at the centre of the national conversation about life insurance, disability insurance and income protection. Independent reviewer Peter Kell has completed his final report, outlining 85 recommendations aimed at improving customer protections, claims handling, communication, vulnerability support and the enforceability of the Code. - read more

Cancer Claim Decision Shows Why Policy Wording Matters

01 Jul 2026: Paige Estritori

A new Australian Financial Complaints Authority decision has underlined a point that is easy to overlook when buying personal insurance: a serious diagnosis does not always mean a policy benefit will be payable. The ruling, reported on 29 June 2026, involved a claimant who sought benefits after being diagnosed with high-grade urothelial carcinoma of the bladder. Although the illness was serious and required treatment, AFCA found the insurer was entitled to rely on the specific wording of the policy. - read more

Claims Delays Put Life Insurance Service Standards in Focus

24 Jun 2026: Paige Estritori

A recent sanction against an unnamed life insurer has put claims handling back under the spotlight, particularly for Australians who rely on personal insurance as a financial safety net. The Life Insurance Code Compliance Committee found that the insurer failed to request required information from claimants at the earliest available opportunity, contributing to significant delays for some customers waiting on claim decisions. - read more

Hostplus and MetLife Extend Partnership to Strengthen Member Insurance Offerings

03 Jun 2026: Paige Estritori

Hostplus, a leading Australian superannuation fund, has announced the extension of its group insurance partnership with MetLife Australia until June 2028. This strategic move aims to enhance the insurance benefits available to Hostplus members, reflecting the fund's commitment to providing comprehensive and cost-effective coverage. - read more

Click for more Insurance News