Hunton Insurance Recovery Blog

Hardly a day passes without hearing about another major cyber incident. Recent studies show that cybersecurity incidents are becoming more common, but they are also costly, with some reports estimating an average cost of $9.44 million for breaches in the US. In recognition of this mounting problem, government agencies continue to ramp up enforcement and issue new rules, regulations and other guidance aimed at curbing cyber risks. Last week, the SEC adopted final rules requiring registered entities to periodically disclose material cybersecurity incidents and annually disclose their cybersecurity risk management, strategy and governance plans. In announcing the new rules, the SEC specifically noted that “an ever-increasing share of economic activity is dependent on electronic systems.” According to SEC Chair Gary Gensler, “Whether a company loses a factory in a fire—or millions of files in a cybersecurity incident—it may be material to investors.” 

The Supreme Court of New Jersey recently agreed to hear ACE American Insurance Company’s appeal of an Appellate Division decision finding that a war exclusion in a property insurance policy did not preclude coverage for Merck & Co., Inc.’s claim stemming from a 2017 cyberattack. We previously reported about this case here.   

Extreme weather events—such as heat waves, wildfires, hurricanes, and tornadoes—may create major protection gaps for insureds. In California, rising temperatures and massive heat waves have led the California Department of Insurance (the “Department”) to rethink risk solutions and insurance programs that protect the state’s communities from the risks associated with extreme heat. While the Department’s proposed solution applies only to coverage for local governments, Tribes, and public health agencies, it is a “hot” topic among many Californians, as insurance professionals and policyholders debate the Department’s proposed approval of parametric insurance.

We recently posted about Nevada becoming the first state to prohibit defense-within-limits provisions in liability insurance policies. Defense-within-limits provisions—resulting in what is called “eroding” or “wasting” policies—reduce the policy’s applicable limit of insurance by amounts the insurer pays to defend the policyholder against a claim or suit. 

Whether an insurer has a right to reimburse defense costs after a finding that it has no duty to defend remains an open question in Georgia. However, in Continental Casualty Co., et al. v. Winder Laboratories, LLC, et al., Case No. 21-11758 (11th Cir. Jul. 13, 2023), the Eleventh Circuit Court of Appeals has weighed in with its prediction on the likely answer. Persuaded by the logic of other jurisdictions that, “wide-ranging reimbursement is necessarily inappropriate in a system—like Georgia’s—that is predicated on a broad duty to defend and a more limited duty to indemnify,” the Eleventh Circuit predicted that, “the Supreme Court of Georgia would follow that logic to adopt a ‘no recoupment’ rule to protect its insurance system.”  

The Fifth Circuit recently held that Blue Bell Creameries’ commercial general liability (CGL) insurers do not have a duty to defend the ice cream company in a shareholder lawsuit, which arose from a Listeria outbreak. The decision underscores the importance of coordination of different coverages and policies across insurance programs, as well as the potential perils policyholders may face if forced to seek recovery for certain losses under non-traditional policies.

When is a catch-all provision too broad? When “a plain-text reading of that provision would swallow a substantial portion of the coverage that the policy otherwise explicitly purports to provide,” according to the Seventh Circuit Court of Appeals. Citizens Insurance Co. of America v. Wynndalco Enterprises LLC, Case No. 22-2313.

Nevada recently became the first state to prohibit defense-within-limits provisions in liability insurance policies. Defense-within-limits provisions—resulting in what’s called “eroding” or “wasting” policies—reduce the policy’s applicable limit of insurance by amounts the insurer pays to defend the policyholder against a claim or suit. These provisions are commonly included in errors and omissions (E&O), directors and officers (D&O) and other management liability policies. This is in contrast to other policies, most commonly commercial general liability policies, which provide defense “outside of limits” where defense costs do not reduce the policy’s limit.