T-Mobile is still entitled to coverage related to a 2015 data breach from Zurich Insurance Group Ltd. despite receiving a payment from Experian Information Solutions Inc., a Washington state appeals court ruled Monday to uphold a lower court ruling.
The trial in the case, T-Mobile USA, Inc. v. Steadfast Insurance Co.; and Zurich American Insurance Co. stems from an Experian data breach that exposed the personal information of about 15 million people who applied for service with T-Mobile.
Under its policy with Zurich American Insurance and its subsidiary Steadfast Co., T-Mobile self-insured the first $10 million of any loss, and Steadfast insured the next $15 million.
After facing multiple individual and class action lawsuits stemming from the incident, T-Mobile incurred $17.3 million in costs and expenses in the case, the ruling said.
It filed an arbitration claim against Experian, which led to Experian agreeing to pay T-Mobile $10.75 million to settle.
Steadfast denied coverage to T-Mobile, arguing that because it had recovered $10.75 million from Experian, T-Mobile’s loss fell within its $10 million SIR.
T-Mobile sued Steadfast in March 2019, arguing that the policy does not allow Steadfast to offset the Experian recovery against the insurer’s payment obligation. Sided with T-Mobile in the dispute, a three-judge court upheld a lower court decision.
According to Steadfast, the $10.5 million T-Mobile recovered from Experian “released” the insurer because, as a result, T-Mobile did not satisfy its $10 million self-insured retention, the ruling said.
“However, the Experian recovery did not ‘exonerate’ T-Mobile from payment because it did not release or relieve T-Mobile of its obligation to pay the costs and expenses it incurred from the data breach,” it said.
“T-Mobile remained directly responsible for these obligations and paid them in full. Experian then reimbursed T-Mobile for a portion of the data breach-related costs and expenses already paid by T-Mobile.
“We conclude that the policy does not exclude as a covered loss the $10.75 million T-Mobile recovered from Experian,” it said, in remanding the case for further proceedings.
Attorneys in the case did not respond to requests for comment.