Eleventh Circuit Computer Fraud Decision Highlights Policy Wording Pitfalls
Time 3 Minute Read
Categories: Cyber

On May 10, 2018, the Eleventh Circuit Court of Appeals affirmed a Northern District of Georgia decision barring coverage for a loss claimed to arise under a “Computer Fraud” policy issued by Great American Insurance Company to Interactive Communications International, Inc. and HI Technology Corp. Interactive Commc’ns Int’l, Inc. v. Great Am. Ins. Co., No. 17-11712, 2018 WL 2149769 (11th Cir. May 10, 2018).  InComm sells “chits,” each of which has a specific monetary value to consumers who can redeem them by transferring that value to their debit card.  To redeem a chit, a consumer dials a specific 1-800 number and goes through a computerized interactive voice system.  InComm lost $11.4 million when fraudsters manipulated a glitch in the system by placing multiple calls at the same time.  This allowed consumers to redeem chits more than once.  InComm sought coverage for these losses under its “Computer Fraud” policy.

To trigger coverage under InComm’s policy, the loss must “result[] directly from the use of any computer…” The Eleventh Circuit concluded that the fraud was accomplished through the “use” of a computer because the fraudsters engaged with the computerized voice system when they made their redemption calls.  The Eleventh Circuit further found, however, that the loss did not “result[] directly” from the use of a computer, and thus found that the loss was not covered by the policy.  Looking to the dictionary, the Court stated that one thing results “directly” from another if it follows straightaway, immediately, and without any intervention or interruption.  The Eleventh Circuit concluded that InComm’s losses did not immediately occur after the fraudsters made their phone calls.  Rather, InComm still needed to transfer the funds to a third party, who would then transfer the money to the consumer.  Thus, the Eleventh Circuit found that the “lack of immediacy—and the presence of intermediate steps, acts, and actors—makes clear that the loss did not ‘result [] directly’ from the initial fraud.”

This decision highlights the narrow reading courts may give to provisions that premise coverage on a loss “resulting directly” from some act or event, notwithstanding the contra proferentem policy interpretation rules that pertain in a majority of U.S. jurisdictions.  Accordingly, policyholders should be wary of any such language, especially where a loss may not occur or manifest itself immediately.  Policyholders concerned about falling victim to this type of coverage issue may wish to negotiate for a policy that does not require the direct causal nexus that the Eleventh Circuit found determinative in this case, such as by including, for instance, language that expands coverage to include loss resulting “directly” or “indirectly” from a particular peril or event.

  • Partner

    Larry Bracken has 40 years of experience litigating insurance coverage, class action and commercial cases in federal and state courts throughout the United States. Pro bono representation of clients in habeas corpus, prisoner ...

You May Also Be Interested In

Time 3 Minute Read

A federal court recently denied an insurer’s motion to dismiss an insured’s claim for declaratory relief. The insurer argued that the policyholder’s declaratory judgment claim was redundant of its breach of contract claim. The Court ruled that “redundancy is not grounds for dismissal under Rule 12(b)(6).”

Time 3 Minute Read

A federal court recently found that a policyholder adequately plead that a loss of hundreds of thousands of dollars through wire fraud is covered under a commercial crime policy. In Landings, Yacht, Golf, and Tennis Club v. Travelers Casualty and Surety Company of America Case No. 2:22-cv-00459, Landings Yacht, Golf, and Tennis Club (“Landings”) sued Travelers Casualty and Surety Company of America (“Travelers”) under a crime policy for denying coverage for: (1) about $6,885.79 in unauthorized withdrawals (“First Withdrawal”) from users purporting to be Landings and (2) $575,723.95 in withdrawals made by a third-party purporting to act on behalf of Landings (“Second Withdrawal”).[1]

Time 4 Minute Read

As businesses continue to increase their reliance on technology, they are bound to face the inevitable risks associated with online transactions and other cyber exposures. This, in turn, emphasizes the importance of having the proper insurance policies and compliance methods in place to prevent or, at least, mitigate losses that ensue from these risks. In this context, many insurance policies require that there be a “direct” loss for there to be coverage, which has spawned numerous lawsuits about what the word “direct” means. The latest court to weigh in has sided with the insured and interpreted that term broadly to essentially mean proximate causation.

Time 4 Minute Read

Recently, the Ninth Circuit dealt with a case involving a scenario that is becoming all too common. In Ernst & Haas Mgmt. Co., Inc. v. Hiscox, Inc., 23 F.4th 1195 (9th Cir. 2022), a property management company’s accounts payable clerk received several e-mails from her supervisor instructing her to pay some invoices. Unbeknownst to the clerk, these e-mails did not originate with her supervisor, but were actually part of a fraudulent scheme to elicit fraudulent bank transfers. The clerk paid off hundreds of thousands of dollars in “invoices” before becoming suspicious but, by then, it was too late and the damage was done.

Search

Subscribe Arrow

Recent Posts

Categories

Tags

Authors

Archives

Jump to Page