Hacked Company Loses Insurance Battle Over Customer Payment Scam

The information on this website is general in nature and does not take into account your objectives, financial situation, or needs. Consider seeking personal advice from a licensed adviser before acting on any information.

A company recently faced a significant setback after losing an insurance claim dispute related to funds stolen in a fraudulent email scheme.

Cybercriminals infiltrated the business's email system, sending out fake invoices that directed clients to pay into a bogus bank account.

Consequently, two customers inadvertently transferred a total of $66,148 to the fraudulent account.

Attempts to retrieve this money were unsuccessful, and the customers refused further payments to the company.

The company, holding a management liability insurance policy, sought to claim under its third-party crime coverage to recover the outstanding bills from the customers. However, AIG Australia denied the claim, stating that the policy only addressed "direct financial loss" from theft or fraud by a third party, and argued that since the stolen money belonged to customers, the business itself did not suffer a direct loss.

The Australian Financial Complaints Authority (AFCA) reviewed the case and acknowledged the company's loss. However, it determined that the loss did not align with the policy's specific terms. The ruling emphasized that only the company's customers faced direct financial loss, whereas the company experienced an indirect one due to subsequent non-payments.

The AFCA explained that the hack did not meet the company's policy definition of theft, as the stolen funds belonged to the customers, not the business. This discrepancy meant that the policy's electronic and computer crime coverage was not applicable. Additionally, the policy's criteria for "fraudulent act," which required acts of forgery or counterfeiting the insured had acted upon, were not met since the company was unaware of the false invoices.

This case highlights the critical distinction between direct and indirect financial losses in insurance claims, emphasizing the importance of understanding policy terms. For businesses, particularly those prone to cyber threats, it underscores the significance of having insurance coverage that appropriately addresses loss scenarios stemming from such events. It also serves as a cautionary tale of the complexities involved in recovering from cybercrime attacks without adequate protection.

Moving forward, businesses should ensure robust cybersecurity measures to prevent similar email hacks, coupled with clarifying insurance policies for adequate coverage against indirect financial losses as a result of customer fraud. This scenario may lead insurance providers to reevaluate their product offerings, potentially driving the development of more comprehensive cybercrime coverages. Additionally, the financial sector might witness increased discussions on how to formulate clearer policy definitions that align with the evolving nature of cyber threats.

Published:Tuesday, 11th Mar 2025
Source: Paige Estritori

Please Note: If this information affects you, seek advice from a licensed professional.

Share this news item:

Insurance News

Human Factors Identified as Leading Causes in Major Truck Accidents

14 Mar 2026: Paige Estritori

Recent findings from the National Truck Accident Research Centre's (NTARC) 2025 Major Incident Investigation Report have brought to light the significant role human error plays in major truck accidents across Australia. The report, supported by National Transport Insurance (NTI), indicates that human factors such as inattention, distraction, and inappropriate speed are the predominant causes of these incidents. - read more

AFCA Sides with Freight Company in Dangerous Goods Disclosure Dispute

14 Mar 2026: Paige Estritori

The Australian Financial Complaints Authority (AFCA) has recently ruled in favour of a freight company in a dispute over the disclosure of transporting dangerous goods. This decision provides valuable insights into the obligations of transport companies regarding insurance disclosures. - read more

Navigating Rising Premiums: Challenges for Australian Insurers in 2026

14 Mar 2026: Paige Estritori

In 2026, Australian insurers are confronting a trio of significant challenges: escalating premium costs, persistent cyber threats, and a tightening labour market. These issues are reshaping the industry's priorities and strategies. - read more

The Future of Insurance: Australia's Insurtech Market Set for Explosive Growth

14 Mar 2026: Paige Estritori

Australia's insurtech sector is on the brink of a significant transformation, with projections indicating a surge from $377 million in 2025 to an impressive $4.2 billion by 2034. This anticipated growth, at a compound annual growth rate (CAGR) of 30.68%, reflects the increasing integration of digital technologies within the insurance industry. - read more

Addressing the Evolving Cyber Threat Landscape in the Insurance Industry

14 Mar 2026: Paige Estritori

The upcoming Insurance News conference, scheduled for March 19 in Sydney, is set to tackle the rapidly evolving landscape of cyber risks and the strategies insurers can employ to mitigate them. This timely event will feature a panel of experts, including QBE's Global Head of Cyber Services, Dominic Keller; WTW's Director of Cyber and Technology for the Pacific, Michael Parrant; and MGA's Broking Operations Manager, Trent Woodward. - read more