Be Proactive Now: Commercial Construction Quickly Joining List of Industries Vulnerable to Cyber Attacks
June 15, 2017 —
Jeffrey M. Dennis & Nathan Owens – Newmeyer & Dillion LLPCommercial contractors have long faced their own unique business risks - labor and material shortages, delay claims, bonding issues, and defects in workmanship. But, in today's ever-evolving cyber world, it is imperative that contractors understand they are vulnerable to risks beyond finishing a project on time and on budget. As we are seeing more and more each day, cyber threats impact all businesses, including the construction industry, and the failure to protect against these threats will cost your company millions in damages and reputational harm.
UNDERSTANDING CYBER THREATS
Traditionally, cyber threats are thought of as the theft of employee and customer information over the internet. Given the construction industry is the largest employer in the world, the need to protect this information is obvious. The release or loss of personnel or consumer data could lead to extensive liability under a variety of potential claims, including statutory fines. In addition to securing confidential information, companies have to protect against outside agents accessing control of a company’s security protocols, equipment or encrypting files using malicious software. The recent “WannaCry” attack demonstrates that no business is immune from cyber attacks.
EXAMPLES OF RELATED BREACHES
For those that think these scenarios do not happen, here are two examples of these types of breaches:
* In May 2013, Chinese hackers stole floor plans, server information, and security system designs from an Australian prime contractor. Fearing the risks of compromised physical and network security, the contractor incurred additional costs of $132.6 million in project delays and costs to rework the various components that had been stolen.
* Then, in December 2014, a German governmental office reported that a steel mill suffered massive damage when malware prevented a blast furnace from being properly shut down. Hackers gained access to key technology within the company, which eventually allowed them to control the production line.
THE NEW WORLD OF THE IoT
In addition to these types of “traditional” hacking threats, cybersecurity risks continue to evolve and become more complicated every day. Some of these new threats are driven by the development of a phenomenon known as the Internet of things, or IoT. The IoT is most basically defined as the interconnection of devices with on / off switches to the Internet and each other. Since the IoT is estimated to be 20 billion or more devices within 3 years, and can be combined with malicious software, IoT poses one of the most challenging risks for contractors to protect against.
The technology included in today's commercial buildings clearly opens this avenue of risk. A centralized computer control center, typically employed in new buildings, controls and maintains the systems that are vital to the operation of the building, e.g., power, elevators, HVAC, lighting, and security. What happens if a hacker gains control to one of these systems, let alone all of them? What if a hacker simply utilizes an IoT attack to overwhelm a building’s computer systems? In either scenario, at a minimum, significant disruption would occur. Worse, the health and safety of those within the building could be jeopardized. A hacker may utilize ransomware in combination with an IoT attack to take over control of the building and hold it and possibly the occupants “hostage” until a ransom is paid.
The first significant IoT attack happened in October 2016 when a major web hosting company was attacked through the IoT, causing the host site to crash. The attack did not steal information, it simply caused the site to crash. But, that crash caused world-wide disruption across the Internet.
Hackers used malicious software to access a hundred thousand common household devices — web cameras, fitness trackers, DVR’s, smart TVs and even baby monitors — to flood the hosting company’s servers with incredibly high internet traffic. This attack showed that everyday items can be hacked and controlled by cyber criminals and then used against anyone else.
As we have all seen in recent news, the WannaCry cyber attack impacted businesses across the globe. Days after the attacks, hospitals were still left feeling its impact with continued appointment and planned operation cancellations, and delays in service. We should expect to see these types of attacks increasing in frequency.
PAY ATTENTION OR FACE THE CONSEQUENCES
Make no mistake about it, the stakes are incredibly high in the realm of cyber security protection. By 2021, the annual worldwide cost attributable to cyber attacks is estimated to reach the trillions of dollars. If any of these potential attacks occur, a contractor faces significant exposure, in many forms, including:
* Monetary. Cybersecurity events result in direct monetary losses in the form of notification costs, data recovery costs, and, of course, legal and public relations fees. States are also starting to impose strict standards on companies which will result in significant regulatory punishment in the cases of cyber breaches, including the added costs associated with agency investigations, regulatory fines and consumer redress funds.
* Reputation. Perhaps more important than the monetary risk, a contractor may incur substantial reputational harm if such a breach or attack is successful. Recent data has shown that small to medium-sized companies that experience a significant cybersecurity breach go out of business within six months of the breach – due to not only high monetary costs, but severe reputational damage.
* Criminal. The recently passed New York cybersecurity regulations place potential criminal penalties on compliance personnel. Other states are likely to follow New York.
As a business leader and commercial builder, the time to act is now. While the purchase of specific cyber insurance is an important part of protecting against the risks of a cyber attack, many cyber policies contain exclusionary language embedded in the policy making coverage potentially illusory. Additional steps can and need to be taken immediately, including an honest discussion of internal cybersecurity protections, examination of risk management strategy, and the training of employees. Failure to take these important steps could result in a disastrous cybersecurity breach and the loss of millions of dollars.
Jeffrey M. Dennis currently serves as Newmeyer and Dillion’s Managing Partner and, as a business leader, advises his clients on cybersecurity related issues, introducing contractual and insurance opportunities to lessen their risk. You can reach Jeff at jeff.dennis@ndlf.com.
J. Nathan Owens is the Managing Partner for Newmeyer & Dillion’s Las Vegas office. With more than 10 years in the construction industry as a former contractor himself, Nathan understands the complex issues builders and developers face in all aspects of development and construction. You can reach Nathan at nathan.owens@ndlf.com.
About Newmeyer & Dillion
For more than 30 years, Newmeyer & Dillion has delivered creative and outstanding legal solutions and trial results for a wide array of clients. With over 70 attorneys practicing in all aspects of business, employment, real estate, construction and insurance law, Newmeyer & Dillion delivers legal services tailored to meet each client’s needs. Headquartered in Newport Beach, California, with offices in Walnut Creek, California and Las Vegas, Nevada, Newmeyer & Dillion attorneys are recognized by The Best Lawyers in America©, and Super Lawyers as top tier and some of the best lawyers in California, and have been given Martindale-Hubbell Peer Review's AV Preeminent® highest rating. For additional information, call 949-854-7000 or visit http://www.newmeyeranddillion.com/.
Read the court decisionRead the full story...Reprinted courtesy of
Texas Supreme Court Rules on Contractual Liability Exclusion in Construction Cases
January 22, 2014 —
Beverley BevenFlorez-CDJ STAFFThe Texas Supreme Court ruled on Ewing v. Amerisure Ins. Co. on January 17th, a “much-anticipated” decision according to Carl A. Salisbury of Kilpatrick Townsend & Stockton LLP. “Construction projects are always the subject of contracts among owners and contractors” Salisbury stated in his article on Lexology.com. The recent decision demonstrates that “an exclusion in the standard Comprehensive Liability Insurance policy that precludes coverage for ‘liabilities assumed under contract’” does not usually “apply to construction contracts.”
In 2008, Ewing Construction Company built a set of tennis courts in Corpus Christi, according to Salisbury. “Shortly after construction was complete, according to the school district, ‘the courts started flaking, crumbling, and cracking, rendering them unusable for their intended purpose of hosting competitive tennis events.’” After the school district sued Ewing in state court, Ewing “turned the suit over to Amerisure, its CGL insurer, seeking a defense and indemnity. Amerisure denied all coverage, citing the contractual liability exclusion in its policy. This inspired Ewing to sue the carrier in federal district court for the Southern District of Texas.”
After several rulings and appeals, the case eventually reached the Texas Supreme Court: “According to the Ewing court, the contract claims that Ewing failed to perform in a good and workmanlike manner ‘are substantively the same as its claims that Ewing negligently performed under the contract because they contain the same factual allegations and alleged misconduct.’ Failure to perform in a ‘good and workmanlike manner’ is functionally and substantively the same as performing negligently. ‘Accordingly,’ the Ewing court said, ‘we conclude that a general contractor who agrees to perform its construction work in a good and workmanlike manner, without more, does not enlarge its duty to exercise ordinary care in fulfilling its contract, thus it does not ‘assume liability’ for damages arising out of its defective work so as to trigger the Contractual Liability Exclusion.’”
Read the court decisionRead the full story...Reprinted courtesy of
Thieves Stole Backhoe for Use in Bank Heist
July 31, 2013 —
CDJ STAFFYou can do a lot with a backhoe, but maybe not use it for bank robbery. The New York Daily News wasn’t clear on how many were involved, but described them as “a brazen crew of bandits.” They stole a backhoe from a construction site and used it to pry an ATM from a bank. When they couldn’t get the ATM open, they jumped into a black SUV and left the scene.
The bandits were engaging in a sort of ATM spree. They did manage to open two ATMs, each holding more than $7,000 in cash. They were less successful at their use of heavy machinery. In an earlier heist, they used a tow truck to try to remove an ATM, but the chain snapped and the bank’s alarm rang. The Daily News quotes one former tow truck driver who said that it was “stupid to use a tow truck.” In her experience, “those chains snap at any time.”
Read the court decisionRead the full story...Reprinted courtesy of
Nevada Construction Defect Lawyers Dead in Possible Suicides
March 28, 2012 —
CDJ STAFFA number of news sources have reported on the recent death of Nevada construction defect attorney, Nancy Quon. Ms. Quon was implicated in a recent scandal in which a group conspired to control homeowner associations in order to divert construction defect lawsuits to the members of the conspiracy.
Ms. Quon was found dead in her bathtub. The details are still under investigations. She and her boyfriend were accused of a failed arson/suicide scheme in 2010. Ms. Quon survived an attempt to burn down her home. Subsequently, her boyfriend obtained some gamma-hydroxybutyric acid (GBH) for her, as part of another failed suicide attempt.
Subsequent to Ms. Quon’s death, David Amesbury was found in California dead by hanging. Mr. Amesbury took a plea deal in the case, and he had admitted his role in providing legal and construction contracts to firms in the conspiracy. He was accused of fixing HOA elections.
Read the full story…
Read the full story…
Read the full story…
Read the full story…
Read the court decisionRead the full story...Reprinted courtesy of
Quick Note: Attorney’s Fees and the Significant Issues Test
November 03, 2016 —
David Adelstein – Florida Construction Legal UpdatesAttorney’s fees become a component of damages that parties seek to recover whenever there is a contractual or statutory basis for them to recover their fees. Parties want to be able to recover all or substantially most of the attorney’s fees they incurred in pursuing their claim. (In my experience, recovering all of the fees incurred is very challenging.) But, to be entitled to attorney’s fees, a party has to be deemed the
prevailing party. There is the sentiment that as long as you recover a positive net judgment (even if it is for $100 when your claim was for $50,000) then you will be able to recover your attorney’s fees which will likely exceed the amount that was ever in dispute.
Read the court decisionRead the full story...Reprinted courtesy of
David Adelstein, Katz, Barron, Squitero, Faust, Friedberg, English & Allen, P.A.Mr. Adelstein may be contacted at
dma@katzbarron.com
Real Estate & Construction News Roundup (7/31/24) – International Homebuying Shrinks Commercial Real Estate Focus on Sustainability, and U.S. Banks Boost Provisions for Credit Losses
September 09, 2024 —
Pillsbury's Construction & Real Estate Law Team - Gravel2Gavel Construction & Real Estate Law BlogIn our latest roundup, mortgage rates drop to lowest levels since March, hotel construction activity highest since February 2023, Biden administration calls for legislation regarding property owners, and more!
- International buyers bought 54,300 existing homes from April 2023 to March 2024 – a 36% drop from the year before. (Diana Olick, CNBC)
- The Biden administration called on Congress to pass legislation penalizing property owners for rent increases above a certain level as part of its plan to lower housing costs through a series of administrative actions. (Mary Salmonsen, Multifamily Dive)
- U.S. banks have boosted their provisions for credit losses as deteriorating commercial real estate (CRE) loans and high interest rates fuel fears of defaults. (Manya Saini, Niket Nishant and Matt Tracy, Reuters)
Read the court decisionRead the full story...Reprinted courtesy of
Pillsbury's Construction & Real Estate Law Team
Excess Carrier Successfully Appeals Primary Insurer’s Summary Judgment Award
December 09, 2011 —
Tred R. Eyerly - Insurance Law HawaiiAlthough the excess carrier was given inadequate notice of the underlying arbitration, the trial court determined it shared responsibility with the primary carrier for the arbitration award. Finding disputed issues of fact, the Washington Court of Appeals reversed in Am. States Ins. Co. v. Century Surety Co., 2011 Wash. App. LEXIS 2488 (Wash. Ct. App. Oct. 31, 2011).
The primary insurer, American States, issued two liability policies to Professional Home Builders (PHB), a siding contractor. The policies were for successive years, 1998-1999 and 1999-2000. Each policy had annual limits of $1 million per occurrence. PHB also had a commercial excess liability policy for 1999-2000 with Century Surety Company.
PHB was sued by Residential Investment Partners (RIP) for construction defects after moisture entered the building envelope, causing decay and damage. Century’s expert determined the decay started before the 1999-2000 policy period.
RIP and PHB went to arbitration.
Read the full story…
Reprinted courtesy of Tred R. Eyerly, Insurance Law Hawaii. Mr. Eyerly can be contacted at te@hawaiilawyer.com
Read the court decisionRead the full story...Reprinted courtesy of
Real Estate & Construction News Roundup (10/1/24) – Hybrid Work Technologies, AI in Construction and the Market for Office Buildings
November 05, 2024 —
Pillsbury's Construction & Real Estate Law Team - Gravel2Gavel Construction & Real Estate Law BlogIn our latest roundup, commercial mortgage bond market in trouble, commercial real estate investments, pressure on mortgage REITs, and more!
- Short-term issues facing U.S. commercial real estate have made it an investment opportunity and values have bottomed out. (CNBC)
- As organizations report plans to shake up their real estate portfolios, the flight to quality spurs interest in space planning, amenities and hybrid work technologies. (Joe Burns, Facilities Dive)
- The conversation about AI’s potential benefits and risks has been a common refrain in construction recently. (Matthew Thibault, Construction Dive)
Read the court decisionRead the full story...Reprinted courtesy of
Pillsbury's Construction & Real Estate Law Team