Accellion Unable to Shake Liability for $2.4M Ransomware Attack

Accellion Inc. still faces several claims over its alleged failure to notify a law firm of a critical security update, which led the firm to pay over $2 million in ransom payments, according to a federal judge in California who refused to dismiss most claims against the online file-transfer platform.

ACE American Insurance Co. accused Accellion of failing to promptly notify one of its policyholders—an unnamed “Boston law firm"—following a large-scale 2020 supply-chain attack. The insurance company said that Accellion used outdated contact information for the firm, which led to $2.4 million in losses after it was affected by a ...