Cybersecurity insurance is a new insurance industry product that reflects the havoc wreaked by hacks, data breaches and phishing attempts, which have become bolder because cybersecurity extorting businesses has proved lucrative. The first reported appellate decision was recently approved for publication. It is a thoughtful, well-written and comprehensive opinion of Judge Heidi Willis Currier.

In Merck v. Ace American Insurance Co., N.J. Super. (App. Div. 2023), the court was confronted with an issue under an "all risks" policy on which Merck made a claim after a cyberattack infected and damaged thousands of computers in its global network. The carriers denied coverage under a "hostile/warlike action" exclusion. Summary judgment was granted to plaintiffs, the trial court finding that the exclusion did not apply. The Appellate Division concluded the insurance carriers did not demonstrate that the cyberattack was a "hostile" or "warlike" action as contemplated by the exclusion, and, therefore affirmed the trial court summary judgment order.