The Seventh Circuit read six words in a Hartford Fire Insurance Company exclusion, sent to OSD through electronic mail, and left Illinois's insolvency receiver holding a nearly $4 million wire-fraud loss with no coverage behind it.
On June 18, 2026, the Seventh Circuit read six words to Illinois's insolvency receiver and closed the file: sent to OSD through electronic mail. The panel affirmed a Rider 17 exclusion inside a Hartford Fire Insurance Company bond that the Office of the Special Deputy Receiver was counting on to cover a wire-fraud loss, leaving OSD to decide whether a petition to the U.S. Supreme Court is worth filing over one clause. Hartford's policy barred coverage for any "fraudulent instruction sent to [OSD] through electronic mail," language the panel found dispositive regardless of who typed the message. Nearly $4 million of what a hacking scheme drained from OSD's accounts remains unrecovered and, under this ruling, uninsured.
About fourteen and a half months earlier, the case already looked dead. Judge Andrea R. Wood in Chicago had thrown out OSD's coverage suit, docketed as No. 1:22-cv-03709, under Rule 12(b)(6) on March 31, 2025, ruling the exclusion applied on the pleadings alone. OSD appealed anyway, arguing a policy written to catch inside fraud should not swallow outside hackers who never touched a company laptop. The Seventh Circuit, in No. 25-2309, did not just affirm the dismissal. It read Rider 17's "sent to" language as a recipient test, not an origin test, a reading of this rider's specific wording rather than a categorical, circuit-wide rule for every hacked-inbox claim.
The mechanism sat inside Rider 17, the endorsement Hartford had already written into its financial-institution bond. According to the Office of the Special Deputy Receiver's pleaded account, hackers spear-phished OSD's chief financial officer, took over the CFO's email account, then emailed other OSD staff posing as the CFO with wire instructions for what the messages called investment purchases. OSD alleges the intruders reset mail-forwarding rules so replies routed back to them instead of the real CFO, buying weeks before anyone noticed the money was gone. None of that mattered to the exclusion's grammar. Rider 17 asked one question only: did a fraudulent instruction arrive by email at OSD. It did. Origin and motive dropped out of the analysis the moment the panel located the operative verb in "sent to."
Hartford Fire Insurance Company won without ever putting a hacker on a witness stand. A single defined phrase carried the case at the pleading stage in 2025 and again before three appellate judges in 2026. The receivership office, created to recover money for failed insurers' creditors, now absorbs a nearly $4 million hole, with that unrecovered balance not coming back through this policy. OSD exists to unwind failed Illinois insurers and repay their creditors from whatever the estate can recover; this ruling narrows what one of its own bonds will let it recover here.
Trial drama, nuclear verdicts, and the plaintiff-firm tactics behind them. Court-reporter prose, no consultant filler. Read by litigation leaders at F500 legal departments and national carriers. Free.
The ruling's reach may run past OSD. Similar "sent to" or "received by" triggers appear in other financial-institution bonds and crime policies' computer-fraud and funds-transfer-fraud riders, sometimes stacked next to a social-engineering sublimit; the record here does not establish how common that exact wording is industry-wide. Policyholders in that fight usually argue the fraud originated outside the company; this panel just told OSD the recipient line mattered more than the return address. OSD had already recovered roughly $3 million of the nearly $7 million taken before the lawsuit began. The remaining balance is the number the appellate loss now locks in as uninsured, with no sublimit question reached, because the panel resolved the case on Rider 17's exclusion alone. So far only the Seventh Circuit has adopted this recipient-based reading; other circuits have not yet ruled on identical rider language.
OSD's options have narrowed. The ordinary window to seek panel or en banc rehearing under the federal rules runs fourteen days from June 18 and had already closed by the time this ruling was days old, absent an extension this record does not show. A certiorari petition to the Supreme Court remains the door still open, one that would ask the justices to referee a circuit-level reading of one insurer's private contract language rather than a statute. Absent that, the receivership eats the loss, and every insurer drafting a financial-institution bond this year gets a circuit opinion to cite the next time a claims adjuster wants to deny a hacked-inbox wire.
This panel just told OSD the recipient line mattered more than the return address.
For now the unrecovered balance stays where the wire sent it: gone. The coverage stays where six words put it: closed. Whether OSD pursues a certiorari petition is the open question the docket has not yet answered.
The Executive Briefing is six questions. It shows you exactly where the gaps are.
Take the Executive Briefing →Trial drama, nuclear verdicts, and the plaintiff-firm tactics behind them. Court-reporter prose, no consultant filler. Read by litigation leaders at F500 legal departments and national carriers. Free.