News & Events

Connecticut Attorneys Victorious in Cyber Liability Coverage Case

Connecticut attorneys Melicent B. Thompson and Eric S. Lankton recently obtained a victory for an insurer client before the Connecticut Supreme Court in a cyber liability coverage dispute wherein the plaintiffs sought CGL coverage for a data theft incident.

On May 26, 2015, the Connecticut Supreme Court affirmed summary judgment for Litchfield Cavo LLP’s client, the primary carrier and the co-defendant umbrella carrier, on plaintiffs’ breach of contract claim. In this case, plaintiffs claimed the insurer defendants improperly declined defense and indemnity coverage under CGL primary and follow form umbrella policies for pre-suit claims against them arising from loss of (presumed theft of) IBM data tapes containing IBM employees’ personal data. The plaintiffs sought $6.1 million in coverage paid to IBM as a result of private pre-suit settlement negotiations with IBM, for IBM’s claimed costs incurred as the result of the incident in: notifying the employees whose data was lost; setting up call centers for them; and, monitoring their credit.

The main issues on appeal were: whether the loss of the IBM tapes containing the private data constituted a “publication” for purposes of triggering personal injury coverage under the policies; and, whether the insurers were obligated to defend the insureds as to IBM’s pre-suit demands and related settlement negotiations, notwithstanding that the policies limited the defense obligation to “suits,” defined to include not only civil proceedings but also “other dispute resolution proceedings.”

After the trial court rendered summary judgment for the insurer defendants, plaintiffs appealed to the Connecticut Appellate Court, which affirmed, and then successfully petitioned the Connecticut Supreme Court to review the case. The Connecticut Supreme Court affirmed and adopted the Appellate Court’s decision, in which the Appellate Court affirmed the trial court’s holding that absent evidence of actual access to the lost data, there was no “publication,” and further, that the pre-suit private settlement negotiations did not qualify as a “suit” because they were not the equivalent of an “other dispute resolution proceeding.”

The industry has been watching this and similar cases closely as cyber liability currently is a front line issue in coverage litigation nationwide. In this case, three amici curiae filed briefs with the Connecticut Supreme Court in support of plaintiffs’ position.