Ninth Circuit Finds Exclusion Bars Coverage For Social Engineering Scheme
Time 2 Minute Read
Categories: Cyber

On April 17, 2018, the Ninth Circuit affirmed a district court decision finding that an exclusion barred coverage for a $700,000 loss resulting from a social engineering scheme. Aqua Star (USA) Corp. v. Travelers Cas. & Surety Co. of Am., No. 16-35614 (9th Cir. Apr. 17, 2018). The scheme involved fraudsters who, while posing as employees, directed other employees to change account information for a customer. The employees changed the account information and sent four payments to the fraudsters.

The crime policy at issue contained a broadly worded exclusion providing that the policy “will not apply to loss resulting directly or indirectly from the input of Electronic Data by a natural person having the authority to enter the Insured’s Computer System.” The court found that the exclusion squarely applied because the employees that changed the account information and sent the payments to the fraudulent accounts had authority to enter the policyholder’s computer system.

The Ninth Circuit’s decision is another reminder that policyholders should carefully consider whether their existing coverage would protect against losses from social engineering schemes, which continue to rise in prevalence. While coverage may be available under insurers’ form policy language, many insurers also offer endorsements designed specifically to cover social engineering scheme losses. Regardless of the instrument used to convey the coverage, however, careful drafting of the language used is critical to ensure that the broadest scope of coverage is actually obtained.

  • Partner

    Mike is a Legal 500 and Chambers USA-ranked lawyer with more than 25 years of experience litigating insurance disputes and advising clients on insurance coverage matters.

    Mike Levine is a partner in the firm’s Washington, DC ...

  • Counsel

    Patrick counsels clients on all aspects of insurance and reinsurance coverage. He assists clients in obtaining appropriate coverage and represents clients in resolving disputes over coverage, including in litigation and ...

You May Also Be Interested In

Time 4 Minute Read

While the holiday season brings joy to many, it can be a stressful time for businesses. Cyberattacks often spike during weekends and holidays when businesses are less vigilant and slower to detect unusual activity. This reduced oversight creates an opportunity for attackers to exploit weaknesses and cause significant disruption. A recent article in Tech Times noted that ransomware groups launch over 50% of their attacks during weekends and take advantage of December’s increased operational shortages.

Time 4 Minute Read

In a recent opinion, the 8th Circuit rejected an insurer’s attempt to expand insurer victories in a COVID-19 context to other more traditional claims of property damage. Reaffirming long standing principles, the court held soot and water damage associated with a fire constituted “direct physical loss or damage” under a commercial property insurance policy.

Time 1 Minute Read

After any merger or acquisition, disputes can arise regarding the accuracy of representations and warranties made by the seller to the buyer. In most transactions today, the buyer obtains representation and warranty insurance to cover the buyer for losses resulting from the seller’s breach of a representation or warranty. When an R&W policy provides coverage, a seller may attempt to offset its obligations to the buyer by amounts paid by the R&W insurer. Likewise, the R&W insurer may attempt offset against the damages paid by the seller to the buyer. But other legal and equitable ...

Time 5 Minute Read

Ruling on cross motions for summary judgment, a federal court in New York held that AIG Specialty Insurance Company (AIG) must cover the settlement of an underlying action against its insured, SS&C Technologies Holdings, Inc. (SS&C), who was duped by e-mail scammers to issue millions in wire transfers.  The court rejected AIG’s assertion that the loss resulted from SS&C’s exercise of authority or discretionary control of client funds where SS&C only had limited administrative authority and further held that, even if SS&C had exercised the requisite authority, the exclusion was ambiguous.  A copy of the court’s decision can be found here.

Search

Subscribe Arrow

Recent Posts

Categories

Tags

Authors

Archives

Jump to Page