Be Proactive Now: Commercial Construction Quickly Joining List of Industries Vulnerable to Cyber Attacks
June 15, 2017 —
Jeffrey M. Dennis & Nathan Owens – Newmeyer & Dillion LLPCommercial contractors have long faced their own unique business risks - labor and material shortages, delay claims, bonding issues, and defects in workmanship. But, in today's ever-evolving cyber world, it is imperative that contractors understand they are vulnerable to risks beyond finishing a project on time and on budget. As we are seeing more and more each day, cyber threats impact all businesses, including the construction industry, and the failure to protect against these threats will cost your company millions in damages and reputational harm.
UNDERSTANDING CYBER THREATS
Traditionally, cyber threats are thought of as the theft of employee and customer information over the internet. Given the construction industry is the largest employer in the world, the need to protect this information is obvious. The release or loss of personnel or consumer data could lead to extensive liability under a variety of potential claims, including statutory fines. In addition to securing confidential information, companies have to protect against outside agents accessing control of a company’s security protocols, equipment or encrypting files using malicious software. The recent “WannaCry” attack demonstrates that no business is immune from cyber attacks.
EXAMPLES OF RELATED BREACHES
For those that think these scenarios do not happen, here are two examples of these types of breaches:
* In May 2013, Chinese hackers stole floor plans, server information, and security system designs from an Australian prime contractor. Fearing the risks of compromised physical and network security, the contractor incurred additional costs of $132.6 million in project delays and costs to rework the various components that had been stolen.
* Then, in December 2014, a German governmental office reported that a steel mill suffered massive damage when malware prevented a blast furnace from being properly shut down. Hackers gained access to key technology within the company, which eventually allowed them to control the production line.
THE NEW WORLD OF THE IoT
In addition to these types of “traditional” hacking threats, cybersecurity risks continue to evolve and become more complicated every day. Some of these new threats are driven by the development of a phenomenon known as the Internet of things, or IoT. The IoT is most basically defined as the interconnection of devices with on / off switches to the Internet and each other. Since the IoT is estimated to be 20 billion or more devices within 3 years, and can be combined with malicious software, IoT poses one of the most challenging risks for contractors to protect against.
The technology included in today's commercial buildings clearly opens this avenue of risk. A centralized computer control center, typically employed in new buildings, controls and maintains the systems that are vital to the operation of the building, e.g., power, elevators, HVAC, lighting, and security. What happens if a hacker gains control to one of these systems, let alone all of them? What if a hacker simply utilizes an IoT attack to overwhelm a building’s computer systems? In either scenario, at a minimum, significant disruption would occur. Worse, the health and safety of those within the building could be jeopardized. A hacker may utilize ransomware in combination with an IoT attack to take over control of the building and hold it and possibly the occupants “hostage” until a ransom is paid.
The first significant IoT attack happened in October 2016 when a major web hosting company was attacked through the IoT, causing the host site to crash. The attack did not steal information, it simply caused the site to crash. But, that crash caused world-wide disruption across the Internet.
Hackers used malicious software to access a hundred thousand common household devices — web cameras, fitness trackers, DVR’s, smart TVs and even baby monitors — to flood the hosting company’s servers with incredibly high internet traffic. This attack showed that everyday items can be hacked and controlled by cyber criminals and then used against anyone else.
As we have all seen in recent news, the WannaCry cyber attack impacted businesses across the globe. Days after the attacks, hospitals were still left feeling its impact with continued appointment and planned operation cancellations, and delays in service. We should expect to see these types of attacks increasing in frequency.
PAY ATTENTION OR FACE THE CONSEQUENCES
Make no mistake about it, the stakes are incredibly high in the realm of cyber security protection. By 2021, the annual worldwide cost attributable to cyber attacks is estimated to reach the trillions of dollars. If any of these potential attacks occur, a contractor faces significant exposure, in many forms, including:
* Monetary. Cybersecurity events result in direct monetary losses in the form of notification costs, data recovery costs, and, of course, legal and public relations fees. States are also starting to impose strict standards on companies which will result in significant regulatory punishment in the cases of cyber breaches, including the added costs associated with agency investigations, regulatory fines and consumer redress funds.
* Reputation. Perhaps more important than the monetary risk, a contractor may incur substantial reputational harm if such a breach or attack is successful. Recent data has shown that small to medium-sized companies that experience a significant cybersecurity breach go out of business within six months of the breach – due to not only high monetary costs, but severe reputational damage.
* Criminal. The recently passed New York cybersecurity regulations place potential criminal penalties on compliance personnel. Other states are likely to follow New York.
As a business leader and commercial builder, the time to act is now. While the purchase of specific cyber insurance is an important part of protecting against the risks of a cyber attack, many cyber policies contain exclusionary language embedded in the policy making coverage potentially illusory. Additional steps can and need to be taken immediately, including an honest discussion of internal cybersecurity protections, examination of risk management strategy, and the training of employees. Failure to take these important steps could result in a disastrous cybersecurity breach and the loss of millions of dollars.
Jeffrey M. Dennis currently serves as Newmeyer and Dillion’s Managing Partner and, as a business leader, advises his clients on cybersecurity related issues, introducing contractual and insurance opportunities to lessen their risk. You can reach Jeff at jeff.dennis@ndlf.com.
J. Nathan Owens is the Managing Partner for Newmeyer & Dillion’s Las Vegas office. With more than 10 years in the construction industry as a former contractor himself, Nathan understands the complex issues builders and developers face in all aspects of development and construction. You can reach Nathan at nathan.owens@ndlf.com.
About Newmeyer & Dillion
For more than 30 years, Newmeyer & Dillion has delivered creative and outstanding legal solutions and trial results for a wide array of clients. With over 70 attorneys practicing in all aspects of business, employment, real estate, construction and insurance law, Newmeyer & Dillion delivers legal services tailored to meet each client’s needs. Headquartered in Newport Beach, California, with offices in Walnut Creek, California and Las Vegas, Nevada, Newmeyer & Dillion attorneys are recognized by The Best Lawyers in America©, and Super Lawyers as top tier and some of the best lawyers in California, and have been given Martindale-Hubbell Peer Review's AV Preeminent® highest rating. For additional information, call 949-854-7000 or visit http://www.newmeyeranddillion.com/.
Read the court decisionRead the full story...Reprinted courtesy of
When an Insurer Proceeds as Subrogee, Defendants Should Not Assert Counterclaims Against the Insured/Subrogor
June 14, 2021 —
Gus Sara - The Subrogation StrategistIn a subrogation action, one party is substituted to the rights and remedies of another with respect to a lawful claim. The substituted party (the subrogee) is legally able to pursue any right or seek any remedy that would be available to the subrogor regarding that claim. But can a defendant in a subrogation action assert any claim against the subrogee that it would have against the subrogor? In Federated Mut. Inc. Co. v. Kosciusko County, No. 3:20-CV-960, 2021 U.S. Dist. Lexis 88735, the United States District Court for the Northern District of Indiana considered whether a defendant could assert counterclaims against the insureds/subrogors in an action filed in the name of their subrogee. The court held that since the insurerds/subrogors were not a party to the action and the defendant could assert the substance of its counterclaim as a defense, the defendant could not file counterclaims against the insureds/subrogors in the insurer’s subrogation action.
Kosciusko County arose from a motor vehicle accident involving a semi-tractor trailer owned by Bellman Oil Company, Inc. (Bellman) and B & B Transport, Inc. (B & B). The accident occurred on a highway in Kosciusko County in October of 2019. The accident caused the semi-tractor trailer containing ethanol fuel to roll over four times and burst into flames. Federated Mutual Insurance Company (FMIC) insured Bellman and B & B for the semi-tractor trailer and issued payments as a result of the accident.
Read the court decisionRead the full story...Reprinted courtesy of
Gus Sara, White and WilliamsMr. Sara may be contacted at
sarag@whiteandwilliams.com
Rental Assistance Program: Good News for Tenants and Possibly Landlords
January 25, 2021 —
Marissa Levy, Rachel A. Schneidman & Nancy Sabol Frantz - White and Williams LLPThe recently enacted $2.3 trillion Consolidated Appropriations Act, 2021 (the Act), which combined a $900 billion coronavirus relief bill as part of a larger $1.4 trillion omnibus spending and appropriations bill for the 2021 federal fiscal year, contains key provisions that directly impact the hard-hit real estate industry. In particular, Section 501 of Subtitle A of Title V of Division N of the Act establishes the “Emergency Rental Assistance program” (ERA), which appropriates $25 billion through the U.S. Department of the Treasury (Treasury) to provide eligible households with direct financial housing assistance. The enactment of the ERA provides landlords, tenants, borrowers, potential buyers, financial institutions and small businesses with a necessary lifeline to weather the ongoing economic fallout from the COVID-19 pandemic.
From the $25 billion designated for rental assistance, $800 million is reserved for tribal communities and $400 million is reserved for U.S. territories, with the remaining funds to be distributed to state and local governments (grantees) within 30 days of enactment. Under the ERA, fund allocations will be based on a state’s population, with all states, and the District of Columbia, receiving at least $200 million. Local jurisdictions with populations of 200,000 or more may also apply directly to the Treasury for assistance, which would be reduced from the amount granted to the state in which the jurisdiction is located.
Reprinted courtesy of
Marissa Levy, White and Williams LLP,
Rachel A. Schneidman, White and Williams LLP and
Nancy Sabol Frantz, White and Williams LLP
Ms. Levy may be contacted at levymp@whiteandwilliams.com
Ms. Schneidman may be contacted at schneidmanr@whiteandwilliams.com
Ms. Frantz may be contacted at frantzn@whiteandwilliams.com
Read the court decisionRead the full story...Reprinted courtesy of
Recommendations and Drafting Considerations for Construction Contingency Clauses Part III
December 27, 2021 —
Samantha Schacht & Josh Levy - Construction ExecutiveThe best contracts provide the parties with a clear allocation of risks and responsibilities, and a process for handling inevitable project challenges. Contract negotiations can enable parties to have the difficult conversations allocating risks before the start of a project. An effective negotiation, in turn, aligns the parties’ expectations and helps avoid costly disputes born out of misunderstandings of the parties’ respective rights and responsibilities on the project.
This final installment of a three-part series on contingencies in construction contracts addresses factors that should be discussed and considered when drafting a contingency clause in a construction contract with the goal of helping to set clear expectations and avoid disputes.
Part I The Best Laid Plans: Contingency in a Construction Contract explained what a construction contingency is and
Part II The Best Laid Plans: Contingency in a Construction Contract discussed the two primary schools of thought on how a construction contingency fund should be used and managed.
Reprinted courtesy of
Samantha Schacht, Construction Executive and Josh Levy, Construction Executive, a publication of Associated Builders and Contractors. All rights reserved.
Ms. Schacht may be contacted at samantha.schacht@huschblackwell.com
Read the court decisionRead the full story...Reprinted courtesy of
Think Before you Execute that Release – the Language in the Release Matters!
June 17, 2024 —
David Adelstein - Florida Construction Legal UpdatesIf you execute a release in exchange for payment or other consideration, remember the language in the release means something. THE RELEASE LANGUAGE MATTERS! And the meaning in the release may be way more than you intended so please make sure you truly digest and consider release language before executing.
This sentiment could not be truer than in the 2009 decision Bell BCI Company v. United States, 570 F.3d 1337 (Fed. Cir. 2009). In this case, a contractor entered into a modification (change order) with the government. The modification included the following language:
increase the contract amount by $2,296,963 … as full and equitable adjustment for the remaining direct and indirect costs of the Floor 4 Fit-out (EWO 240–R1) and full and equitable adjustment for all delays resulting from any and all Government changes transmitted to the Contractor on or before August 31, 2000.
Read the court decisionRead the full story...Reprinted courtesy of
David Adelstein, Kirwin Norris, P.A.Mr. Adelstein may be contacted at
dma@kirwinnorris.com
Hamptons Home Up for Foreclosure That May Set Record
May 13, 2014 —
Prashant Gopal – BloombergA home in New York’s Hamptons on Further Lane, where comedian Jerry Seinfeld and hedge-fund manager Steven A. Cohen own estates, is up for auction in what will be one of the area’s biggest foreclosure sales.
More than $10.5 million is owed on the 1.8-acre (0.7-hectare) property at 80 Further Lane in East Hampton, according to Daniel Murphy, the Riverhead, New York-based attorney who is scheduled to conduct the sale on June 10.
Read the court decisionRead the full story...Reprinted courtesy of
Prashant Gopal, BloombergMr. Gopal may be contacted at
pgopal2@bloomberg.net
Professional Malpractice Statute of Limitations in Construction Context
June 26, 2023 —
David Adelstein - Florida Construction Legal UpdatesIn an interesting dichotomy, which statute of limitations applies to professional malpractice claims relating to construction claims, i.e., in the construction context?
Is it the two year statute of limitations in Florida Statute s.
95.11(4)( a) that governs professional malpractice claims or is it the four year statute of limitations in Florida Statute s.
95.11(3)(c) that governs actions “founded on the design, planning, or construction of an improvement toot real property”? This dichotomy led the appeal in American Automobile Ins. v. FDH Infrastructure Services, LLC, 48 Fla.L.Weekly D1091a (Fla. 3d DCA 2023).
This case sadly involved a construction accident that led to deaths. A contractor was engaged to install an antenna on an existing television tower. The contractor hired an engineering firm “to perform a structural analysis as to the stability and weight-bearing capacity of the tower. [The engineer] was contractually obligated to assess the proposed rigging plan…to lift the loads necessary to construct the antenna.” FDH Infrastructure Services, supra. Unfortunately, after the installation of the antenna commenced, the rigging components failed resulting in workers falling to their deaths. After insurers paid out benefits, they sued the engineering firm under equitable and contractual subrogation theories. The engineering firm moved for summary judgment arguing the subrogation claims were barred by the professional malpractice two year statute of limitations in section 95.11(4)(a). The trial court agreed and granted summary judgment in favor of the engineering firm.
Read the court decisionRead the full story...Reprinted courtesy of
David Adelstein, Kirwin Norris, P.A.Mr. Adelstein may be contacted at
dma@kirwinnorris.com
Do We Need Blockchain in Construction?
June 22, 2020 —
Cristina Savian - AEC BusinessBlockchain technology claimed to have the potential to disrupt many aspects of how companies do business. And like other emerging technologies, I have been exploring its uses, benefits and assessing its potential opportunities in the construction industry. If like me, you have been wondering what it is and if its applications are limited to financial services and cryptocurrencies; you will be pleasantly surprised to discover that it has a lot more applications with exciting opportunities for our sector too.
Blockchain could have a significant impact on our industry. In writing this article I have discovered that the Australian government is full steam ahead, that many organisations are currently building their own blockchain networks and that it is something that businesses right across the built environment should be preparing for now. But more on that soon, first we need to define what blockchain is.
Read the court decisionRead the full story...Reprinted courtesy of
Cristina Savian, AEC Business
