Court Upholds Coverage Under General Liability Policy For Claim Alleging Failure To Protect Data

In an encouraging development for insureds, the United States Court of Appeals for the Fourth Circuit held that a health care company's general liability insurer was required to defend the company against claims stemming from an alleged failure to secure electronic medical records. In The Travelers Indemnity Co. of America v. Portal Healthcare Solutions, L.L.C., No. 14-1944 (4th Cir. Apr. 11, 2016), the Fourth Circuit held that the breach resulted in a "publication" of medical records, thus falling within the scope of the general liability policy issued to Portal Healthcare Solutions, L.L.C. ("Portal").  The decision reaffirms that insureds that experience adverse cyber events are not limited to cyber-specific policies as the source of potential insurance coverage.