Sony Insurer Suing To Deny Data Breach Coverage
idontgno writes "It keeps getting better and better for Sony and its business units. Reuters reports that Sony's insurer, Zurich American, is suing to avoid paying out on Sony's legal liability which may arise from its spectacular online security breaches a few months ago."
We won't all one day drive our Sony to the Sony to pick up more Sony?
sig not found
I was just thinking to myself, what this story needs is some more lawyers.
I wonder how many Zurich American executives' kids were affected by the outage?
"No matter how cynical you get, it is impossible to keep up." -- Lily Tomlin
I mean, can you imagine the shareholders meeting? I get a image of a guy who has taken up drinking and is developing a bad ulcer. I doubt this will work, but it's still interesting that they try.
Restore the madness of youth's lechery
... the worst ever handled online security breach, here comes the plain-text captcha: http://pro.sony.com/bbsc/jsp/forms/generateCaptcha.jsp
Yes, you heard well. The catpcha is not an image, but HTML text with CSS to distort the text style! That is how things must be done in Sony, that explains SO MUCH!
The headline is not surprising at all, IMHO.
Yeah, I don't think they should have to pay either. Even if the policy specifically covered digital attacks, Sony still would have had to do their due diligence. Most (all?) of the attacks I heard about were silly things Sony shouldn't have been vulnerable to, like SQL injections. This is an absolutely massive company, there is no excuse for not having proper penetration testing and security audits done on their sites, and making the insurance pay out in this case is kind of like trying to make insurance pay for a wheel barrel of money you left on your front porch.
If Sony's issues were due to their own negligence in securing their network, why should the insurance company have to pay? If I'm driving drunk my insurance company isn't going to cover my car when I get into an accident, so why the hell should an insurance company cover this?
If Sony was a person this wouldn't even be a question...
This makes me respect the attacks on Sony all the more. The attacks on Sony did more damage than the temporary breeches and outages. Those can be forgotten in a short time. But when insurance coverage is being denied, real and long-lasting damage has indeed occurred.
An insurance company will often deny coverage to parties who are risky. If a party engages in behavior that, for example, makes them a target of angry people, they are a higher risk. Sony has made many, many parties angry and in this case, they made themselves target. What's more, they failed to improve security at any site or location that bears the Sony brand. This makes them more than risky, it makes them negligent.
I only wish "arrogance" were enough cause to raise insurance rates... but then again, insurance companies would all be uninsurable.
I guess that'll teach some punk to try to jailbreak one of your consoles!
SJW: Someone who has run out of real oppression, and has to fake it.
since you seem to judge laptop quality by GPU, you get my sympathy
Signature Pro version 1.13.2-3 release 83.5 beta3try7 after-breakfast edition
I wonder how many Zurich American executives' kids were affected by the outage?
And I wonder how this might be worked into Zurich's next ad campaign. "Zurich: Because shit happenz."
This is going to actually result in some major changes as far as data security is handled and judged, I think. I mean, the legal system (at the moment) is rigged pretty heavily against consumers; arbitration requirements, class-action denials, and so forth means that no matter how reckless you are with your data, they just really don't have to worry so much about a lawsuit coming from that end of the pipe. As long as their data security isn't so objectively awful that the government comes down to tear them a new one (...Which they rarely will, since they seem to need to pass a new law every time to make it so it 'won't happen again' and is thus unusable in the original incident due to Ex Post Facto restrictions), they were home free.
But an insurance company? Now you've got a Corporate Titan vs a Corporate Titan - in other words, an even playing field. And a single lawsuit with enough money in the balance for Sony to really, really need to win.
And win or lose, what we're going to get out of this, is SOME legal standard for 'required data security' with real penalties for breaching - if you go over this line, it's got an impact similar to losing a class action. Because that insurance company that was going to cover your losses for each case of damages, won't. This'll be a standard that companies will try to meet. And as said, even if they rule that Sony WASN'T negligent, they're going to come up with what is. I'm hoping for a verdict here instead of a settlement.
Ctrl-U [...] F12
Discoverable how?
When they removed Linux capabilities from the PS3 it was supposed to enhance enhance security. April fools on them!
It's the corporate way...
It's just some silly data, what's the big deal?
All your $ are mine.
Rick B.
This is just normal business practice.
Insurance companies are not "good guys" who look at the insurance policy and decide if they are obligated to pay on a large claim. They do not want to pay---period. They look at the policy and decide whether they would win or lose the lawsuit when you sue them to pay the claim. If the language of the policy is at all vague or unclear, even in the slightest respect, they will take the position that they are not obligated to pay. At that point they'll running the math looking at the cost of a lawsuit and the likelihood of success.
In this case, Zurich looked at the probabilities of winning versus losing, the cost of the lawsuit, and the cost of paying Sony. They decided it made economic sense to spend a few million on lawyers to try and avoid paying a large claim. Like they say in the mafia movies: "It's not personal, it's just business."
Sony = We're not responsible, someone illegally accessed your data.
Sony = We have insurance for that, collect from them >>>>
Insurance Co = (professional non-payer of fees, obsfucator and dragger of feet) We're not paying, Sony was criminally negligent. Go collect from them >>>>>
Sony = OMG! The government must protect us from the evil haxors and get your restitution from our insurance.
Insurance Co = Restitution shmestitution, it is us who got hurt here! The gov't must protect us from the evil haxors. We're not paying.
Lawyers = PROFIT!!!!
Rick B.
Zurich are not trying to get out because of Sony's gross negligence in their security. This is what the various drunk driving and lunatic driving analogies would imply.
From TFA, Zurich are saying 'it does not have to defend or indemnify Sony against any claims "asserted in the class-action lawsuits, miscellaneous claims, or potential future actions instituted by any state attorney general."' I.e. that the policy was never insurance against cyber-damage, but against property or personal damage caused by Sony's products. If Sony's products exploded, or polluted the environment, or jammed radios, Zurich would have to pay up. But they claim that the policy they sold was never intended to cover Sony's databases.
Consciousness is an illusion caused by an excess of self consciousness.
( curl http://pro.sony.com/bbsc/jsp/forms/generateCaptcha.jsp 2>/dev/null | grep "<b>" | sed "s/[<>]/ /g" | awk '{printf($2)}'; echo )
HTML 4 TRANSITIONAL.
The biggest reason I've used HTML 4 Transitional is because W3C mistakenly deprecated the value attribute of the li element and removed it from the HTML 4 Strict and XHTML Strict DTDs entirely without giving a viable alternative at the time. (CSS counters aren't it for two reasons that; I can explain.) It's been added back to HTML5 though.
Insurance Company collects premium but doesn't want to pay out.