Tesco Bank Hack Illustrates Need for Robust Cyber Insurance
Time 1 Minute Read

As reported on the Insurance Recovery blog, earlier this week, retailer Tesco Plc’s banking branch reported that £2.5 million (approximately $3 million) had been stolen from 9,000 customer bank accounts over the weekend in what cyber experts said was the first mass hacking of accounts at a western bank. The reported loss is still being investigated by UK authorities but is believed to have occurred through the bank’s online banking system. The loss, which is about half of what Tesco initially estimated, is still substantial and serves as a strong reminder that cyber-related losses are a real threat to retailers and other industries. According to reports, Tesco Bank spent £500 million (approximately $618 million) building up its technology platform over the past seven years. Even that very substantial expenditure was not enough, however, to prevent the recent hack, illustrating the need for robust cyber insurance as a component of any comprehensive cyber protection program.

  • Partner

    Mike is a Legal 500 and Chambers USA-ranked lawyer with more than 25 years of experience litigating insurance disputes and advising clients on insurance coverage matters.

    Mike Levine is a partner in the firm’s Washington, DC ...

You May Also Be Interested In

Time 2 Minute Read

The New York Office of the Attorney General recently reached a $500,000 settlement with a New York orthopedics practice for allegedly failing to protect patient and employee information in light of a 2023 data breach.

Time 2 Minute Read

On December 16, 2025, the Federal Trade Commission announced an enforcement action against Illusory Systems Inc., a Utah-based company doing business as Nomad, following a major data breach in which hackers stole $186 million from consumers.

Time 2 Minute Read

Nishith Desai Associates reports that on November 13, 2025, India’s Ministry of Electronics and Information Technology enacted India’s Digital Personal Data Protection Rules, 2025, which operationalize India’s Digital Personal Data Protection Act, 2023.

Time 5 Minute Read

On September 11, 2025, the Cyberspace Administration of China issued the Administrative Measures for Reporting National Cybersecurity Incidents.

Search

Subscribe Arrow

Recent Posts

Categories

Tags

Authors

Archives

Jump to Page