Digital risk impacts all businesses
See how Coalition helps businesses recover from digital risks through our unique approach to active monitoring, incident response, and comprehensive insurance.

Explore our case studies

$5.5M recovered from fraudulent transfer
Coalition worked with law enforcement to recover $5.5M from an international bank account and covered an additional $500K in FTF.

Dental office avoids ransom payment
A nationwide dental office restored from backups when they were hit with ransomware — Coalition helped cover their business interruption costs.

Firm recovers $3.5M without filing a claim
Coalition worked with a financial firm’s bank to recover all but $405 of $3.5M of fraudulently transferred funds.

Manufacturer avoids paying ransom
Coalition Incident Response worked with law enforcement to source the decryption keys for this manufacturer—allowing them to recover without paying the ransom.

Nonprofit suffers cryptojacking event
Coalition’s Service Fraud coverage helped a nonprofit after a threat actor mined cryptocurrencies on their dime.

Tech company combats social engineering scam
Two threat actors worked in tandem to trick this company’s bank into authorizing transactions totaling nearly $500,000.

Financial firm minimizes ransom payout
When an asset management firm’s partner saw their name on the dark web, the pressure was on the firm to pay its ransom to protect the partner’s data.

Manufacturer resumes operations after data compromise
A manufacturer worked with Coalition Incident Response to negotiate a ransom when they couldn’t fully restore from backups.

Law firm battles ransomware
A law firm came to terms with Coalition Incident Response negotiating their ransom when they learned sensitive client data had been exfiltrated.

Compromised vendor leads to fraudulent transfer
A property manager’s bookkeeping vendor experienced an email compromise that led to $180,000 in funds transfer fraud losses.

Breach coverage allows municipality to investigate early
When a municipality had suspicious EDR alerts, they contacted Coalition to help them discover any nefarious activity.

Law firm fully covered after funds transfer fraud
A fake client scammed a law firm into a fraudulent transfer, which was covered by their Funds Transfer Fraud coverage.

Significant losses covered for medical office
A medical office had nearly $800k in losses from a ransomware attack covered by Coalition.

Phishing attacks trigger claims
Three different companies experienced claims that started with phishing attacks.

Pet supply manufacturer avoids deibilitating ransom losses
After negotiating a ransom payment, a manufacturer didn’t receive decryption keys and spent three weeks restoring from backups.

Construction company finds breach source with CIR
A construction company’s Invoice Manipulation coverage was triggered when an employee’s compromised email enabled a threat actor to steal a $56,000 invoice payment.

Bitcoin ransom resolved in 48 hours with CIR
A ransomware attack encrypted all of a colocation and IT services firm’s computer systems and data, including their backups.

Tech company has full funds recovery after spoofed email
A company wired $200,000 to a hacker impersonating their CFO. Coalition recovered $150,000 within 24 hours of receiving the call, and their insurance policy covered the rest.

Industrial manufacturer recovers from production line attack
A hacker gained remote control of a manufacturer’s industrial control systems that controlled their production line, damaging production equipment and in-process components.

Security trainings used for entire organization
A healthcare company uses Coalition’s included Employee Security Training and simulated phishing emails with every member of their staff.

Nonprofit narrowly avoids $1.3M loss
A threat actor facilitated two large transfers totaling nearly $1.3 million by spoofing a nonprofit’s legitimate domain.

Business interruption costs covered after industrial system attack
An alcohol manufacturer was hit with a $2.3 million ransom, resulting in damaged machinery and business interruption.

Toy retailer wards off DDoS attacks
A threat actor was taking a toy retailer’s store offline every day. Coalition uncovered an old firewall rule that was letting them in.
