Be Proactive Now: Commercial Construction Quickly Joining List of Industries Vulnerable to Cyber Attacks
June 15, 2017 —
Jeffrey M. Dennis & Nathan Owens – Newmeyer & Dillion LLPCommercial contractors have long faced their own unique business risks - labor and material shortages, delay claims, bonding issues, and defects in workmanship. But, in today's ever-evolving cyber world, it is imperative that contractors understand they are vulnerable to risks beyond finishing a project on time and on budget. As we are seeing more and more each day, cyber threats impact all businesses, including the construction industry, and the failure to protect against these threats will cost your company millions in damages and reputational harm.
UNDERSTANDING CYBER THREATS
Traditionally, cyber threats are thought of as the theft of employee and customer information over the internet. Given the construction industry is the largest employer in the world, the need to protect this information is obvious. The release or loss of personnel or consumer data could lead to extensive liability under a variety of potential claims, including statutory fines. In addition to securing confidential information, companies have to protect against outside agents accessing control of a company’s security protocols, equipment or encrypting files using malicious software. The recent “WannaCry” attack demonstrates that no business is immune from cyber attacks.
EXAMPLES OF RELATED BREACHES
For those that think these scenarios do not happen, here are two examples of these types of breaches:
* In May 2013, Chinese hackers stole floor plans, server information, and security system designs from an Australian prime contractor. Fearing the risks of compromised physical and network security, the contractor incurred additional costs of $132.6 million in project delays and costs to rework the various components that had been stolen.
* Then, in December 2014, a German governmental office reported that a steel mill suffered massive damage when malware prevented a blast furnace from being properly shut down. Hackers gained access to key technology within the company, which eventually allowed them to control the production line.
THE NEW WORLD OF THE IoT
In addition to these types of “traditional” hacking threats, cybersecurity risks continue to evolve and become more complicated every day. Some of these new threats are driven by the development of a phenomenon known as the Internet of things, or IoT. The IoT is most basically defined as the interconnection of devices with on / off switches to the Internet and each other. Since the IoT is estimated to be 20 billion or more devices within 3 years, and can be combined with malicious software, IoT poses one of the most challenging risks for contractors to protect against.
The technology included in today's commercial buildings clearly opens this avenue of risk. A centralized computer control center, typically employed in new buildings, controls and maintains the systems that are vital to the operation of the building, e.g., power, elevators, HVAC, lighting, and security. What happens if a hacker gains control to one of these systems, let alone all of them? What if a hacker simply utilizes an IoT attack to overwhelm a building’s computer systems? In either scenario, at a minimum, significant disruption would occur. Worse, the health and safety of those within the building could be jeopardized. A hacker may utilize ransomware in combination with an IoT attack to take over control of the building and hold it and possibly the occupants “hostage” until a ransom is paid.
The first significant IoT attack happened in October 2016 when a major web hosting company was attacked through the IoT, causing the host site to crash. The attack did not steal information, it simply caused the site to crash. But, that crash caused world-wide disruption across the Internet.
Hackers used malicious software to access a hundred thousand common household devices — web cameras, fitness trackers, DVR’s, smart TVs and even baby monitors — to flood the hosting company’s servers with incredibly high internet traffic. This attack showed that everyday items can be hacked and controlled by cyber criminals and then used against anyone else.
As we have all seen in recent news, the WannaCry cyber attack impacted businesses across the globe. Days after the attacks, hospitals were still left feeling its impact with continued appointment and planned operation cancellations, and delays in service. We should expect to see these types of attacks increasing in frequency.
PAY ATTENTION OR FACE THE CONSEQUENCES
Make no mistake about it, the stakes are incredibly high in the realm of cyber security protection. By 2021, the annual worldwide cost attributable to cyber attacks is estimated to reach the trillions of dollars. If any of these potential attacks occur, a contractor faces significant exposure, in many forms, including:
* Monetary. Cybersecurity events result in direct monetary losses in the form of notification costs, data recovery costs, and, of course, legal and public relations fees. States are also starting to impose strict standards on companies which will result in significant regulatory punishment in the cases of cyber breaches, including the added costs associated with agency investigations, regulatory fines and consumer redress funds.
* Reputation. Perhaps more important than the monetary risk, a contractor may incur substantial reputational harm if such a breach or attack is successful. Recent data has shown that small to medium-sized companies that experience a significant cybersecurity breach go out of business within six months of the breach – due to not only high monetary costs, but severe reputational damage.
* Criminal. The recently passed New York cybersecurity regulations place potential criminal penalties on compliance personnel. Other states are likely to follow New York.
As a business leader and commercial builder, the time to act is now. While the purchase of specific cyber insurance is an important part of protecting against the risks of a cyber attack, many cyber policies contain exclusionary language embedded in the policy making coverage potentially illusory. Additional steps can and need to be taken immediately, including an honest discussion of internal cybersecurity protections, examination of risk management strategy, and the training of employees. Failure to take these important steps could result in a disastrous cybersecurity breach and the loss of millions of dollars.
Jeffrey M. Dennis currently serves as Newmeyer and Dillion’s Managing Partner and, as a business leader, advises his clients on cybersecurity related issues, introducing contractual and insurance opportunities to lessen their risk. You can reach Jeff at jeff.dennis@ndlf.com.
J. Nathan Owens is the Managing Partner for Newmeyer & Dillion’s Las Vegas office. With more than 10 years in the construction industry as a former contractor himself, Nathan understands the complex issues builders and developers face in all aspects of development and construction. You can reach Nathan at nathan.owens@ndlf.com.
About Newmeyer & Dillion
For more than 30 years, Newmeyer & Dillion has delivered creative and outstanding legal solutions and trial results for a wide array of clients. With over 70 attorneys practicing in all aspects of business, employment, real estate, construction and insurance law, Newmeyer & Dillion delivers legal services tailored to meet each client’s needs. Headquartered in Newport Beach, California, with offices in Walnut Creek, California and Las Vegas, Nevada, Newmeyer & Dillion attorneys are recognized by The Best Lawyers in America©, and Super Lawyers as top tier and some of the best lawyers in California, and have been given Martindale-Hubbell Peer Review's AV Preeminent® highest rating. For additional information, call 949-854-7000 or visit http://www.newmeyeranddillion.com/.
Read the court decisionRead the full story...Reprinted courtesy of
Construction Contract Basics: Attorney Fee Provisions
November 13, 2023 —
Christopher G. Hill - Construction Law MusingsI have discussed the need for
attorney fee provisions in your construction contracts in prior posts here at Construction Law Musings, but thought it merited a restatement of the reasons for the inclusion of such fee provisions (and changing of such provisions when presented) here with the second of my
construction contract basics posts.
Why would you want such a provision? The answer is that without it, or a statute specifically allowing for such fees, a Virginia court will not award your attorney fees without such a provision. Virginia, and a lot of other states, follow the so-called “American Rule” when it comes to attorney fees and costs. In short, that rule states that the parties to litigation pay their own way unless they agree otherwise. While it may seem unfair to make a successful litigant pay for the privilege of being right, that is the rule in Virginia. Throw in the fact that Virginia courts
strictly construe construction contracts and voila we have a situation where without a provision in the contract stating that one party or both will be able to collect attorney fees should that contractor or subcontractor prevail, a construction professional that gets sued (whether rightly or wrongly) will be left with a hefty attorney fees bill and no way to recoup those fees through the courts or any other method.
Read the court decisionRead the full story...Reprinted courtesy of
The Law Office of Christopher G. HillMr. Hill may be contacted at
chrisghill@constructionlawva.com
KF-103 v. American Family Mutual Insurance: Tenth Circuit Upholds the “Complaint Rule”
May 12, 2016 —
Adria Robinson – Colorado Construction LitigationIn Colorado, the “complaint rule” requires insurance carriers to provide a defense to its insured when the allegations contained in the complaint allege any set of facts that may fall within an insurance policy. Some insurers have pushed back on this rule arguing that it may cause an insurer to exercise its duty to defend although the underlying facts ultimately do not fall within the policy.
In KF 103-CV, LLC v. American Family Mutual Insurance Company, 2015 WL 6517782, the Tenth Circuit of the United States Court of Appeals upheld the complaint rule. In its decision, the Tenth Circuit cited several Colorado state court rulings recognizing the courts’ intent to incentivize insurers to defend policies that may facially fall within the terms of the policy. Where there is uncertainty about coverage, the Tenth Circuit cited a Colorado Supreme Court case stating, “[t]he appropriate course of action for an insurer who believes that it is under no obligation to defend, is to provide a defense to the insured under the reservation of its rights.”
Read the court decisionRead the full story...Reprinted courtesy of
Adria Robinson, Higgins, Hopkins, McLain & Roswell, LLCMs. Robinson may be contacted at
robinson@hhmrlaw.com
Brooklyn’s Industry City to Get $1 Billion Modernization
March 12, 2015 —
David M. Levitt – Bloomberg(Bloomberg) -- A late 19th century industrial complex on New York’s Brooklyn waterfront is slated for a $1 billion makeover that aims to transform the property into a modern hub for manufacturing and technology.
The owners of Industry City, Atlanta-based Jamestown and its partners, plan to invest about $890 million over the next 12 years, and anticipate tenants will put in about $150 million of their own money, according to a proposal announced Monday. The project will create one of the largest centers for the “innovation economy” in the U.S., and one of New York’s biggest engines of job growth, said Andrew Kimball, chief executive officer of Industry City.
Read the court decisionRead the full story...Reprinted courtesy of
David M. Levitt, BloombergMr. Levitt may be contacted at
dlevitt@bloomberg.net
How To Fix Oroville Dam
January 04, 2018 —
Henry W. Burke - Engineering News - RecordOriginally Published by CDJ on March 22, 2017
On Sunday, Feb. 12, California officials ordered the immediate, mandatory evacuation of 188,000 residents from towns below the Oroville Dam. Two days later, when federal and state officials deemed the dam safe, the evacuation order was rescinded, and people were allowed to return to their homes. It isn't often that hundreds of thousands of people in the U.S. have to leave their homes because of worries about a catastrophic structural failure.
Read the court decisionRead the full story...Reprinted courtesy of
Henry W. Burke, ENRMr. Burke may be contacted at
hwburke@cox.net
LaGuardia Airport Is a Mess. An Engineer-Turned-Fund Manager Has a Fix
May 26, 2019 —
Sree Vidya Bhaktavatsalam - BloombergThierry Déau’s engineering training in France led him early in his career to building government-funded infrastructure. But it was his entrepreneur father back home in Martinique who inspired him to strike out on his own in 2005. He started Paris-based Meridiam to finance, build, and manage long-term projects. Now, with €7 billion ($7.83 billion) in seven funds and nine offices across Europe, the Middle East, Africa, and North America, Meridiam is playing a key role in high-profile projects such as the upgrade of New York’s LaGuardia Airport and a road tunnel under the Port of Miami. Déau describes Meridiam’s investment approach in an interview with Bloomberg Markets.
Read the court decisionRead the full story...Reprinted courtesy of
Sree Vidya Bhaktavatsalam, Bloomberg
You Need to be a Contractor for Workers’ Compensation Immunity to Apply
November 16, 2020 —
David Adelstein - Florida Construction Legal UpdatesIf you are a contractor, you are aware of workers’ compensation immunity when it comes to injuries on the site; and, if not, you should be. It is this workers’ compensation immunity (where workers compensation is the exclusive form of liability for an injured employee) which is why a contractor should generally always want to ensure its subcontractors have workers’ compensation insurance. Workers’ compensation immunity would protect a contractor that is being sued by a subcontractor’s employees that are injured on the job. For more information on workers’ compensation immunity, please check out this
article and this
article.
In this regard, Florida Statute s. 440.10(1)(b) provides:
In case a contractor sublets any part or parts of his or her contract work to a subcontractor or subcontractors, all of the employees of such contractor and subcontractor or subcontractors engaged on such contract work shall be deemed to be employed in one and the same business or establishment, and the contractor shall be liable for, and shall secure, the payment of compensation to all such employees, except to employees of a subcontractor who has secured such payment.
(If the subcontractor does not have workers’ compensation insurance, the contractor is deemed the statutory employer and its workers’ compensation insurance would apply. Otherwise, the subcontractor’s workers compensation insurance would apply.)
Read the court decisionRead the full story...Reprinted courtesy of
David Adelstein, Kirwin Norris, P.A.Mr. Adelstein may be contacted at
dma@kirwinnorris.com
Liability policy covers negligent construction: GA high court
October 31, 2010 —
Michael Bradford in Business InsuranceATLANTA—Negligent construction that results in damage to surrounding property constitutes an occurrence under a commercial general liability policy, the Georgia Supreme Court has ruled.
In a 6-1 opinion Monday in
American Empire Surplus Lines Insurance Co. Inc. vs. Hathaway Development Co. Inc., the Georgia high court upheld a lower court ruling that the general contractor’s claim for damage caused by a subcontractor’s faulty plumbing work was covered.
The ruling on construction defects is the latest in number of such cases across the United States
Read Full Story...
Reprinted courtesy of Michael Bradford of Business Insurance.
Read the court decisionRead the full story...Reprinted courtesy of
