In 2018, a phishing attack hit RealPage's payment operations and walked away with $10 million. Of that, $9 million belonged to RealPage's landlord clients, rent disbursements the company was holding and routing on their behalf. The remaining $1 million was RealPage's own money, transaction fees it was due for processing the payments in the first place.
RealPage had a choice. It could tell its landlord clients the money was gone and let them absorb the loss, or it could make them whole out of its own pocket and sort out the insurance question afterward. RealPage chose the second path. It reimbursed clients the full $9 million, then filed a claim under its commercial crime policy with AIG's National Union unit, seeking to recover both the $9 million paid to clients and the $1 million in stolen fees (Araullo, Insurance Business).
National Union paid $1.2 million toward the transaction fees. It denied the $9 million entirely. Its argument was not that the theft never happened. It was that reimbursing the landlords had been RealPage's own business decision, an indirect loss the policy was never written to cover.
The lesson here is not about who gets breached. It is about who decides to make a client whole, and whether that decision is insurable. A federal court agreed with the insurer on the big claim and agreed with RealPage on a smaller, related fight over who controlled money recovered afterward. Both rulings turn on a distinction every property manager, landlord, and PropTech vendor should understand before the next incident, not after.
What Actually Happened?
RealPage's commercial crime policy with AIG's National Union Fire Insurance Co. covered RealPage's own direct losses from theft. The $1 million in stolen transaction fees fit that description cleanly, and the insurer paid $1.2 million against that claim without much of a fight. The $9 million reimbursed to landlord clients was a different matter. National Union argued that RealPage's decision to make its clients whole was a voluntary business choice, not a loss RealPage itself suffered under the policy's terms, and a federal judge in the Northern District of Texas agreed, dismissing that portion of RealPage's claim.
While the litigation was ongoing, the US Secret Service recovered roughly $2.9 million of the stolen funds. That triggered a second fight. National Union's policy contained an allocation of recovery provision, language specifying that any recovered funds get applied first against the policyholder's uncovered losses before the insurer sees a dime back. National Union tried to use that provision to claw back the $1.2 million it had already paid RealPage. RealPage refused, arguing the provision only applied to recoveries tied to the covered loss, and that nobody could say which dollars of the $2.9 million traced back to the covered fees versus the uncovered client reimbursements. The court sided with RealPage on this point. National Union was not entitled to the money back.
RealPage also argued that National Union's denial of the $9 million claim violated the Texas Insurance Code's unfair claims practices provisions. The court rejected that too, finding RealPage had not shown actual damages from the denial beyond its own legal fees.
Why Didn't a $9 Million Reimbursement Count as a Covered Loss?
Insurance policies cover the policyholder's loss, not every dollar the policyholder chooses to spend in response to an incident. That is the distinction National Union successfully drew, and it is the part of this case most outage and cyberattack coverage skips entirely. RealPage was never contractually required to reimburse its landlord clients dollar for dollar. It did so to preserve those relationships and its market position. The court treated that choice as separable from the theft itself, which meant the cost of the choice landed on RealPage alone.
This matters far beyond RealPage. Any property manager, SaaS platform, or payment processor that voluntarily makes a client whole after a breach, an outage, or a processing failure, rather than pointing to a contractual limitation of liability, may be converting a potentially insurable loss into an uninsurable one. Generosity toward a client and insurance recovery do not automatically travel together.
What Does the Recovery Allocation Fight Reveal About Who Controls Clawed Back Funds?
This is the angle almost nobody covers when writing about payment platform breaches, and it deserves more attention. Law enforcement recovering stolen funds sounds like unambiguous good news. It is not, once an allocation of recovery provision is sitting in the policy. These clauses determine, after the fact, who has first claim on money that comes back: the insurer trying to recoup its payout, or the policyholder trying to recover the parts of its loss that were never covered in the first place.
RealPage prevailed here only because the recovered $2.9 million could not be traced cleanly to either the covered $1 million or the uncovered $9 million. A property manager or landlord negotiating a crime or cyber policy today should read the allocation of recovery language as closely as the coverage grants themselves. It decides who benefits when the FBI or Secret Service actually gets the money back, and that question rarely gets asked until it is too late to negotiate.
Why Rent Cycle Disbursement Failures Put More Than One Balance Sheet at Risk?
Rent collection concentrates transaction volume into the first days of the month: ACH transfers, credit card payments, late fee calculations, and owner disbursements all move at once. A payment failure or breach during that window does not just delay a single transfer. It creates a decision point for whoever is holding the funds, reimburse the affected party immediately and absorb the risk that the loss is not insurable, or hold the line on contractual limitations of liability and risk the client relationship instead. RealPage's case shows that decision has real financial consequences attached to it, not just reputational ones.
Three Insurance and Disbursement Questions to Resolve Before the Next Outage
Read your allocation of recovery provision before you ever need it. Know in advance whether a future recovery from law enforcement or a third party would flow back to your insurer first, to you first, or would depend on a tracing fight neither side can win cleanly.
Decide now, not during a crisis, whether you will reimburse clients beyond what your contracts require. RealPage's choice to make landlords whole was reasonable business judgment. It was also the exact choice that cost the company insurance coverage for $9 million. If you plan to do the same someday, know that you may be self insuring that decision.
Map your platform, payment, and management agreements against your actual coverage, not just your assumed coverage. This is precisely the kind of cross contract, cross policy visibility gap that a platform built to unify lease data, payment records, and compliance tracking in a single auditable system, such as QTREN, is designed to surface before a claim gets filed rather than after it gets denied.
RealPage did the generous thing for its landlord clients and paid for it twice, once to the phishing scheme and once more when its own insurer decided that generosity did not count as a loss. Nobody forced that outcome. It was baked into the gap between what RealPage's contracts required and what RealPage chose to do anyway.
If your platform failed tomorrow and you decided, on the spot, to make your clients whole, would your insurer call that a covered loss, or would they call it your business decision?
Disclaimer: This article is provided for informational and educational purposes only and does not constitute legal, financial, or compliance advice. Real estate professionals should consult qualified counsel regarding insurance coverage for platform outages and breaches, contractual limitations of liability, and jurisdiction specific requirements.