Excess Insurer Must Stay In Cyber Insurance Case
Time 2 Minute Read
Categories: Cyber

A California state court recently rejected an excess insurer’s attempt at an early exit from litigation over whether it owes coverage for cyber liabilities. In that case (previously summarized here), the policyholder, Cottage Health, suffered a data breach resulting in the disclosure of patients’ private medical information. Subject to a reservation of rights, Cottage Health’s primary insurer, Columbia Casualty, paid millions of dollars to help respond to the data breach and to defend and settle a class action lawsuit filed against Cottage Health. Cottage Health’s excess insurer was Lloyd’s.

Lloyd’s moved to dismiss the claims against it arguing that its coverage obligations had not been triggered since the $10 million of underlying primary limits in Columbia’s policy had not yet been exhausted. The court rejected that argument for two reasons.

First, Lloyd’s failed to establish that the primary limits were, in fact, not exhausted. Second, Lloyd’s did not show that applicable primary limits were actually $10 million. Instead, Lloyd’s had assumed that there was coverage under the primary Columbia policy “to the full extent of its stated limits and that coverage under the Columbia Policy is not subject to limitation.”

The court also refused to dismiss the policyholder’s claim for declaratory relief against Lloyd’s. It explained that, in addition to the deficiencies above, exhaustion of underlying limits was not necessary to create an actual controversy between a policyholder and its excess insurer.

We will continue to keep our readers updated on this case, which thus far is one of only a handful of active cases involving a dispute under policies designed to cover cyber risks and liabilities. More are sure to follow.

  • Counsel

    Patrick counsels clients on all aspects of insurance and reinsurance coverage. He assists clients in obtaining appropriate coverage and represents clients in resolving disputes over coverage, including in litigation and ...

You May Also Be Interested In

Time 1 Minute Read

If recent years have taught insurance practitioners anything, it is that the most consequential coverage disputes rarely turn on novelty alone. In 2025, courts continued to resolve high‑stakes insurance disputes by returning to first principles—examining when claims are related, how losses and occurrences are defined and aggregated, and how policy language allocates risk across time and conduct. D&O coverage and other core insurance law issues again occupied center stage, while decisions in property, cyber, and liability disputes reinforced a familiar theme: policy interpretation remains the decisive factor in determining whether coverage is available in an increasingly complex claims environment. As the decisions discussed below demonstrate, 2025 confirmed that even as risks evolve, coverage disputes remain grounded in careful, policy‑specific analysis.

Time 4 Minute Read

In today’s digital world, data breaches due to vendor failures are becoming increasingly common, often resulting in costly fallout. While insurance can provide a safety net, the interaction between cyber insurance and vendor contracts is crucial for effective recovery and risk management. Vendor contracts should not be treated as mere formalities but as vital frameworks that contain specific, detailed provisions regarding data security obligations to ensure accountability and minimize vulnerabilities.

Time 4 Minute Read

In today’s digital world, data breaches due to vendor failures are becoming increasingly common, often resulting in costly fallout. While insurance can provide a safety net, the interaction between cyber insurance and vendor contracts is crucial for effective recovery and risk management. Vendor contracts should not be treated as mere formalities but as vital frameworks that contain specific, detailed provisions regarding data security obligations to ensure accountability and minimize vulnerabilities.

Time 5 Minute Read

Theft in the cargo industry has skyrocketed in recent years. In the first half of 2024, cargo thefts rose 49 percent and the average loss per shipment by 83 percent. Given these dramatic spikes in cargo theft, policyholders whose operations rely on the safe transportation and trade of cargo should take steps to mitigate against the potential losses of a cargo-theft event. We discuss below the insurance coverage options available to policyholders that can help protect against the risks and losses associated with cargo-related theft if such a loss occurs.

Search

Subscribe Arrow

Recent Posts

Categories

Tags

Authors

Archives

Jump to Page