A cyber insurance policy can contain broad grants of coverage and still be governed by a more specific endorsement when the loss falls within that endorsement. Panasonic Canada Inc. v. XL Specialty Insurance Company, 2026 ONCA 633 shows how much turns on policy structure.
Panasonic incurred about US$2 million in costs following a ransomware incident in 2022. It sought indemnity under several parts of its cyber policy. The policy also contained a ransomware endorsement with a US$3 million self insured retention.
The dispute was not whether the policy contained cyber coverage. It was which wording controlled the loss and which retention therefore applied. Panasonic argued that the lower retention attached to the broader base policy coverages should govern. XL argued that the ransomware endorsement was directed specifically at this category of loss and therefore controlled.
The Ontario Court of Appeal agreed with XL. It read the endorsement with the policy as a whole and focused on the nature of the loss rather than the coverage grant Panasonic selected. Because the loss arose from a ransomware event, the endorsement applied even though Panasonic did not pay a ransom and even though some of the costs could fit within broader coverage language.
That conclusion made the retention decisive. The agreed loss was about US$2 million. The ransomware endorsement carried a US$3 million retention. Because the loss did not exceed that amount, XL had no amount to indemnify.
The reasoning reaches beyond cyber insurance. Endorsements often deal with a particular risk, event or class of loss. They can expand coverage, narrow it, change limits or alter how a deductible or retention applies. An insured can’t necessarily avoid the effect of that wording by characterizing the claim under a different grant of coverage elsewhere in the policy.
The case also shows why policy structure matters as much as individual clauses. Broad insuring language may appear to capture a loss, but the practical result can change once endorsements, sublimits and retentions are read together.
The Court of Appeal allowed XL’s appeal and dismissed Panasonic’s application. The ransomware endorsement applied and the US$3 million retention governed.
Source note: Binder Insurance reviewed detailed independent Canadian legal analyses because direct CanLII text wasn’t accessible during this run. Those sources agreed on the material facts, reasoning and disposition.