(Credit: RareStock/ Adobe Stock)

The Sixth Circuit Court of Appeals ruled that a loss resulting from a cyberattack is not covered by the insured’s CGL policy. The case is Home Depot, Inc. v. Steadfast Ins. Co., 2025 U.S. App. LEXIS 687 (6th Cir. 2025).

Home Depot was the victim of a cyberattack, where unauthorized individuals hacked the company’s computer system and took the payment card information of more than 10 million consumers from self-checkout stations. When Home Depot publicly announced the breach, numerous financial institutions filed suit, seeking to recover funds they had expended in notifying their clients of the breach and responding to its effects. Those claims ultimately settled for almost $170 million.

Want to continue reading?
Become a Free PropertyCasualty360 Digital Reader

Your access to unlimited PropertyCasualty360 content isn’t changing.
Once you are an ALM digital member, you’ll receive:

  • Breaking insurance news and analysis, on-site and via our newsletters and custom alerts
  • Weekly Insurance Speak podcast featuring exclusive interviews with industry leaders
  • Educational webcasts, white papers, and ebooks from industry thought leaders
  • Critical converage of the employee benefits and financial advisory markets on our other ALM sites, BenefitsPRO and ThinkAdvisor
NOT FOR REPRINT

© 2025 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.

Commercial Lines
Cybersecurity
Commercial Lines
Coverage & Policy Issues