Cyber Fraud Incident – How Tysers Helped Secure a £80,000 Recovery

Find out more about how to better protect your business from a cyber attack.

Request A Call

 

The Cyber Fraud Incident

At 8:00am, our client experienced a cyber fraud incident. Susan received a call from a UK number. The caller claimed to be from her organisation’s IT team and warned that the company account had been compromised. To “secure” the account, they instructed Susan to install remote access software.

Despite initial hesitation, the caller used the names of real colleagues and stressed urgency. Susan was persuaded to install AnyDesk—a legitimate tool misused in this case. She granted full access to her device, including screen sharing and system permissions.

Once connected, the cyber fraudster activated “privacy mode,” blacking out Susan’s screen. Under the guise of account recovery, they gained access to the company’s systems and made several unauthorised withdrawals totalling £80,000. Each transaction was kept below £25,000 to avoid triggering additional authorisation.

Immediate Response

Susan quickly raised concerns. The company’s IT provider acted fast—removing the software, revoking access, and securing the system. Tysers notified the insurer immediately, who offered access to a cyber fraud expert to support the recovery process and validate the IT team’s actions.

 

Want to learn more about how you can better protect your business from a cyber attack?

Learn More

 

The Claims Challenge

Initially, the insurer rejected the claim under the “Fraudulent Instruction” section, arguing that the funds were transferred by the hacker—not the insured. However, thanks to Tysers’ expert claims handling, the policy wording was reviewed and it was quickly identified that the loss fell under the Funds Transfer Fraud section.

This section covers:
“Loss of money from an account at a financial institution resulting from fraudulent instructions issued by a third party, without the insured organisation’s knowledge or consent.”

The Outcome

Thanks to Tysers’ intervention, the insurer reversed their decision. The client was reimbursed for the majority of the loss, less the policy excess and a small amount recovered by the bank.

Why It Matters

This case highlights the importance of:

  • Having the right cyber cover in place
  • Acting quickly to contain a breach
  • Working with a broker who understands policy wordings and knows how to challenge decisions when needed

At Tysers, we don’t just place cover—we stand by our clients when it matters most.

 

Is your business prepared? Request a call today and protect your cyber risks.

Request A Call

Latest News & Insights