Claims service that’s powered by real people
Case study: Strategic recovery management
Industry: Legal and Professional Services (US)
Challenge: Ransomware attack compounded by vendor error
The Incident
A small law firm experienced a ransomware breach that encrypted all their files. Their vendor - who also managed their backup solution - mistakenly wiped the encrypted files before verifying the integrity of the backup. It was only then discovered that the backup had not been writing for nearly six months, resulting in the loss of all recent data.
The QBE difference
QBE stepped in with a multi-pronged response:
- Recommended preferred expert vendors to recover data from their cloud-based email (the only uncompromised source)
- Supported the insured in pursuing a liability claim against the vendor for mishandling
- The preferred expert vendors helped to ensure email remained secure throughout the restoration process
- Delivered strategic guidance and hands‑on technical support when it mattered most.
The Outcome
- Recovered critical files from cloud email
- Enabled the insured to pursue third-party liability
- Maintained secure operations during recovery
- Delivered peace of mind and partnership beyond coverage.
The insured now sees QBE not just as a carrier, but as a true partner.
Cover is subject to the applicable policy. These case studies are provided for illustrative purposes only, based on QBE’s claims experience. Some details have been changed for confidentiality. All products and services are provided by QBE Insurance Group Limited or its subsidiaries (“QBE”) or by QBE’s selected third party vendors and may be subject to additional terms and conditions, limitations and disclaimers [available on request]. Information and guidance provided by QBE is not intended to constitute any financial or professional advice tailored to your circumstances and may not have been prepared with detailed knowledge of your systems or the risks to your business, and does not cover all possible situations or actions necessary to respond to a cyber security incident. QBE does not make any guarantees regarding outcomes, such as reduced claim exposure or that a product or service will meet your unique needs. You are responsible for using your independent judgment to assess the advice provided and the suitability of any product and this does not replace the advice of legal counsel or cyber security professionals in preparing for, or responding to, a cyber security incident. QBE is not liable or responsible for services provided by its third party vendors. QBE and the chain links logo are registered trade marks of QBE Insurance Group Limited and third party marks are duly licensed. © 2026 QBE Insurance Group Limited.