AIG had cited multiple clauses in its policy to argue against paying, though the court ruled the tactic did not count as "bad faith."

It's the latest dispute between an insurer and client over whether a plan can cover losses incurred by online fraud.