ACE American Insurance Co. is making waves in the tech world by filing a lawsuit to recover $500,000 tied to a ransomware payout. It’s pointing fingers at tech partners it says failed in their duties. This lawsuit paints a complex picture of responsibility when it comes to cybersecurity failures. ACE alleges that cloud and cybersecurity companies – Congruity and Trustwave – fell short, paving the way for hackers.

The staffing company CoWorx, covered by ACE, relied on Congruity for virtual machines and network security. Despite these setups, ACE argues the lack of multi-factor authentication (MFA) was a glaring oversight. Trustwave, tasked with security monitoring, also fumbled, failing to escalate the breach’s severity. This is a textbook case of what can go wrong when tech promises aren’t kept.

The timeline laid out in the case shows how important a robust security system is. On April 18th, hackers snuck in using a stolen password. ACE believes if Congruity implemented MFA, this breach might have been shut down early.

Trustwave’s response was sluggish—marking alerts as moderate rather than urgent, and missed notifying CoWorx timely. Unfortunately, by the time the ransomware hit hard, it seemed almost too late. ACE highlights these missteps, aiming to underscore negligence from its cybersecurity partners.

In court, ACE is charting new territory. It’s not just about getting back the $500,000—it includes interest and legal costs. The suit, filed in New Jersey, could set a precedent on who holds the cybersecurity bag.

Hungry for more tech insights and latest updates? Visit our Qsentinel page to explore further!

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.