Hunton Insurance Recovery Blog

In a recent Global Data Review article, Hunton Andrews Kurth insurance practice head Walter Andrews commented on the FBI’s guidelines on ransomware payments and the insurance industry’s aggressive marketing of ransomware policies, noting that policyholders now have a resource that can help cover the cost of such an attack. The full Global Data Review article can be found here.

Recap of Hunton Insurance Recovery Group presentations in August and September 2019 focusing on key risk management techniques and strategies for maximizing recoveries under corporate insurance policies and enforcing indemnity rights under technology, sales, services, outsourcing, and other commercial contracts:

• John Eichman and Sergio F. Oehninger presented a seminar on Electronic Crime – Insurance Coverage for Cyber Attacks and Computer Fraud, Independent Community Bankers of America Webinar Series, September 24, 2019.
• Sergio F. Oehninger presented seminars on ...

Insurance companies frequently raise the so-called “dishonesty” exclusion that is typically found in most professional liability and directors and officers insurance policies.  Last week, the U.S. Court of Appeals for the Sixth Circuit took a substantial step toward curtailing that practice.  In a coverage dispute with eight-figure implications, the appellate court found in favor of the policyholder and ruled that publishing false statements does not equate to dishonesty and thus is not sufficient to support application of a dishonesty exclusion.

The Seventh Circuit held last week that a manufacturer’s insurer must cover its insured, a designer and builder of anaerobic digesters, under its errors and omissions policy for claims alleging breach of contract, despite an exclusion in the policy for claims arising out of the breach of an express or oral contract. The decision in Crum & Forster Specialty Insurance Company v. DVO, Inc., No. 18-2571 (7th Cir. Sept. 23, 2019), illustrates the practical application of policy construction to avoid what would otherwise amount to an illusory promise of coverage.

Congratulations to Hunton Andrews Kurth LLP insurance recovery lawyer, Geoffrey Fehling, on his confirmation by the DC Bar Foundation’s Board of Directors to the organization’s Young Lawyers Network Leadership Council.

A Florida district court recently held that an insurer wrongfully refused to defend a Miami-based strip club in a lawsuit filed by 17 models claiming that the club used their images to promote its business without their authorization. The insurer was required to defend the club for allegations of defamation under the policy’s personal and advertising coverage even though 16 of the 17 plaintiffs’ claims alleged conduct outside the covered policy period and no plaintiffs brought a cause of action for “defamation.” The decision highlights the broad duty to defend, in Florida and elsewhere, that policyholders should emphasize when pursuing coverage.

On September 18, 2019, a Texas federal court vacated its prior ruling and entered summary judgment for the insured, finding that after a hacker impersonating the customer convinced the insured to wire $1 million out of the customer’s account, the insurer had a duty to defend its insured against claims by its customer because the potential for coverage existed.  See Quality Sausage Company, LLC, et al. v. Twin City Fire Insurance Co., Civil Action No. 4:17-CV-111 (S.D.TX) (Dkt. No. 110).  The prior order was based on disputed extrinsic evidence, which the court considered in deciding the duty to defend, even though Texas’ narrow exception to the “eight corners” rule is limited to only undisputed extrinsic evidence.

Energy industry: is your insurance sufficient to handle a major cyber event? Larry Bracken, Mike Levine, and I address this question and more in our recent article for Electric Light & Power, found here.  In the article, we identify three major gaps in cyber insurance that we routinely see when analyzing coverage for energy industry clients. The first major gap is coverage for bodily injury or property damage caused by a cyber event. Most cyber insurance policies exclude coverage for both bodily injury and property damage, even if caused by a cyber event. Meanwhile, many commercial general liability insurance policies now exclude cyber-related risks, thus creating a gap in coverage for these losses. The second gap we identify is coverage for fines and penalties, including those issued under the European Union’s General Data Protection Regulation (GDPR). Even where cyber insurance policies expressly purport to cover fines and penalties, it is unclear if these may be deemed uninsurable as a matter of public policy in certain jurisdictions. Finally, we identify a gap in coverage for business income losses when the insured’s network, or that of a vendor on which they rely, goes down. That coverage is a key component of a robust cyber program, but one that is typically only offered for an additional premium.

The Third Circuit ruled on Friday that differing “occurrence” definitions can have materially different meanings in the context of whether product defect claims constitute an “occurrence” triggering coverage under general liability insurance policies. The Court held in Sapa Extrusions, Inc. v. Liberty Mutual Insurance Company, that product claims against Sapa may be covered under policies that define an “occurrence” as an accident resulting in bodily injury or property damage “neither expected nor intended from the standpoint of the insured.”  However, the Court affirmed that coverage was not triggered under policies lacking the “expected” or “intended” limitation, reasoning that, under those policies, there was no question that the intentional manufacturing of Sapa’s product was too foreseeable to amount to an “accident.”

As the 2019 hurricane season peaks, the Bahamas and the Southeast United States have already endured a catastrophic storm. Hurricane Dorian not only tragically caused loss of life and substantial property damage, but it also led to the cancellation or postponement of major events, resulting in considerable economic losses for affected companies.