Hacked Company Loses Insurance Battle Over Customer Payment Scam

The information on this website is general in nature and does not take into account your objectives, financial situation, or needs. Consider seeking personal advice from a licensed adviser before acting on any information.

The company, holding a management liability insurance policy, sought to claim under its third-party crime coverage to recover the outstanding bills from the customers. However, AIG Australia denied the claim, stating that the policy only addressed "direct financial loss" from theft or fraud by a third party, and argued that since the stolen money belonged to customers, the business itself did not suffer a direct loss.

The Australian Financial Complaints Authority (AFCA) reviewed the case and acknowledged the company's loss. However, it determined that the loss did not align with the policy's specific terms. The ruling emphasized that only the company's customers faced direct financial loss, whereas the company experienced an indirect one due to subsequent non-payments.

The AFCA explained that the hack did not meet the company's policy definition of theft, as the stolen funds belonged to the customers, not the business. This discrepancy meant that the policy's electronic and computer crime coverage was not applicable. Additionally, the policy's criteria for "fraudulent act," which required acts of forgery or counterfeiting the insured had acted upon, were not met since the company was unaware of the false invoices.

This case highlights the critical distinction between direct and indirect financial losses in insurance claims, emphasizing the importance of understanding policy terms. For businesses, particularly those prone to cyber threats, it underscores the significance of having insurance coverage that appropriately addresses loss scenarios stemming from such events. It also serves as a cautionary tale of the complexities involved in recovering from cybercrime attacks without adequate protection.

Moving forward, businesses should ensure robust cybersecurity measures to prevent similar email hacks, coupled with clarifying insurance policies for adequate coverage against indirect financial losses as a result of customer fraud. This scenario may lead insurance providers to reevaluate their product offerings, potentially driving the development of more comprehensive cybercrime coverages. Additionally, the financial sector might witness increased discussions on how to formulate clearer policy definitions that align with the evolving nature of cyber threats.

Published:Tuesday, 11th Mar 2025
Author: Paige Estritori

Please Note: We do not endorse any specific products or companies. Some content is sourced from third parties, including press releases, and may not be independently verified for accuracy or completeness.

Share this news item:

Insurance News

Clear

NEOS Elevates Income Protection with Increased Medical-Free Limits

03 May 2026: Paige Estritori

NEOS has recently announced significant enhancements to its income protection offerings, effective from 11 March 2026. Responding to adviser feedback, the insurer has increased the maximum coverage available without mandatory medical examinations, aiming to simplify the application process for Australians seeking income protection insurance. - read more

Acenda Life Enhances Income Protection Policies with Increased Coverage Limits

03 May 2026: Paige Estritori

Acenda Life has recently implemented a series of updates to its Retail Life Insurance portfolio, effective from 11 April 2026. These changes are designed to provide greater flexibility and accessibility for Australians seeking income protection insurance, addressing common concerns about policy limitations and entry age restrictions. - read more

AFCA Supports Insurer's Application of Offset Clause in Income Protection Claim

03 May 2026: Paige Estritori

The Australian Financial Complaints Authority (AFCA) has recently ruled in favour of Nippon Life Insurance in a dispute concerning the application of an offset clause in an income protection (IP) claim. This decision underscores the critical importance of policyholders understanding the specific terms and conditions of their insurance policies. - read more

AustralianSuper Announces Substantial Insurance Premium Increases

25 Apr 2026: Paige Estritori

AustralianSuper, the nation's largest superannuation fund, has informed its members of impending increases in insurance premiums, set to take effect from May 30, 2026. This development is particularly noteworthy for those holding life, total and permanent disability (TPD), and income protection insurance through their superannuation accounts. - read more

Insurers Push to Extend Rebate for Low-Income Seniors

25 Apr 2026: Paige Estritori

Health insurers are calling on the Australian government to exempt low-income seniors, including those on the Age Pension, from the proposed changes to the Private Health Insurance Rebate. The concern is that requiring these individuals to pay hundreds of dollars more each year to maintain their private health insurance could lead some to downgrade their coverage or abandon it altogether. - read more

TAL's Health Sense Plus Now Covers Income Protection Policies

17 Apr 2026: Paige Estritori

In a significant development for policyholders, leading Australian life insurer TAL has announced the expansion of its Health Sense Plus program to encompass income protection (IP) policies. Effective from 8 August 2025, this initiative aims to incentivise proactive health management by offering premium discounts to clients who engage in preventative health checks. - read more

Click for more Insurance News