Explore common ransomware attack tactics in the Cyber Threat Index 2025
Skip To Main Content
Cyber Incident? Get Help

CASE STUDY

Demolition company’s compromised email leads to theft of $56,000 invoice payment

Construction worker laying out vinyl flooring

Industry

Construction

Background

  • Employees: Less than 50

  • Coverages: Invoice Manipulation, Breach Response

A construction company specializing in demolition and abatement invoiced a vendor for $56,000. The vendor followed the email instructions and paid the invoice, but the money never arrived.

After they contacted Coalition Claims, we immediately got to work. The construction company initiated its Breach Response coverage¹ and engaged in a forensic investigation with Coalition Incident Response (CIR) to determine whose system was compromised. CIR found that a construction company employee’s email was compromised and led to the breach, triggering the Invoice Manipulation coverage included in their policy.²

At the guidance of our Claims team, the construction company spoke to their vendor to determine how they would recover the $56,000. The vendor did not have its own insurance but agreed to pay $28,000, while the construction company’s policy covered the rest, totaling $25,500 after their $2,500 self-insured retention.

Coalition² brings together active monitoring, incident response, and comprehensive insurance to solve cyber risk. To learn more, visit coalitioninc.com.

1. Breach response included the engagement of an incident response firm; the insured selected Coalition Incident Response. 2. The claim scenarios described here are intended to show the types of situations that may result in claims. These scenarios should not be compared to any other claim. Whether or to what extent a particular loss is covered depends on the facts and circumstances of the loss, the terms and conditions of the policy as issued and applicable law.

Ready to learn more?

Blog

Our brokers and policyholders get access to all of the intel we have on how to prevent, remedy, and recover from breaches of all kinds.

Newsroom

We’re bringing a new approach to managing digital risk, and the world has noticed. Here’s what people are saying about Coalition.

Careers

We’re a team of experts, backed by powerful partners, developing a safer world.