Ontario Court Rules on Ransomware Coverage in Panasonic Case

• •The Ontario Court of Appeal ruled that ransomware endorsements govern claims from ransomware attacks.
• •Panasonic incurred $2 million in costs due to a ransomware attack but did not pay a ransom.
• •The ruling reversed a lower court decision, emphasizing the need to interpret endorsements alongside the entire policy.

The Ontario Court of Appeal ruled in Panasonic Canada Inc. v. XL Specialty Insurance Company that a ransomware endorsement applies to losses from a ransomware attack, even if the insured claims under a different coverage provision. The case arose from a February 2022 ransomware incident where Panasonic incurred approximately $2 million in response costs after attackers accessed their network and exfiltrated confidential data. Panasonic did not pay a ransom but sought coverage under its cyber policy, which included a $1.5 million retention in the base policy and a $3 million retention under the ransomware endorsement. The lower court sided with Panasonic, but the Court of Appeal reversed this decision, stating that the endorsement's definitions must be read in conjunction with the entire policy. This ruling emphasizes the importance of understanding policy wording and its implications for claim recovery strategies.