A Matter of Time: Negligence Claim for Cyber Fraud Falls Outside Consecutive Claims-Made Cyber Policies

Published
Score
6

Why it matters

The U.S. District Court for the Southern District of Ohio, applying Ohio law, ruled that a negligence claim stemming from a cyber fraud incident fell outside coverage under consecutive claims-made cyber insurance policies[9]. The court determined the claim was neither first made nor reported during the first policy's effective period, and notice to the second insurer exceeded its 30-day reporting window, resulting in denial of coverage[9].

Parties involved include an unnamed insured (likely the victim of cyber fraud), their cyber insurers for two successive policies, and the Wiley Rein LLP law firm reporting the decision. No specific companies, individuals, or agencies beyond the court are named in available details, though the case parallels broader trends in cyber negligence litigation, such as subrogation suits against vendors (e.g., Travelers Cas. & Sur. Co. of Am. v. Blackbaud, Inc.)[1].

The incident arose from a cyber fraud event triggering a negligence lawsuit, with timing issues arising across policy transitions—common in claims-made policies requiring claims to be both made and reported within strict periods[7][10]. Timeline: Cyber fraud occurred before the first policy ended; claim made after, with late notice to the second policy (exact dates unspecified beyond recent ruling published April 3, 2026).

This ruling is newsworthy now due to its fresh April 3, 2026, publication amid rising cyber fraud claims, clarifying strict temporal limits in claims-made cyber policies and potential coverage gaps at renewals—impacting policyholders and insurers as litigation over exclusions, reporting, and negligence surges[2][3][7].

Sources

mail

Get notified about new Contracts developments

Primary sources. No fluff. Straight to your inbox.

See more entries tagged Contracts.