This seems dubious.

> On its way to the customer, the invoice was intercepted by an attacker, who then manipulated the account number to their own advantage.

How did the attacker gain access to the email? Most likely they breached the account of either the sender or the recipient. In the first case the breach should be on the sender and they should pay the damage. In the latter case the damage should be on the recipient.

The only case where this has much to do with email security is when an email server is breached.

This whole article is a lot of words around very little information.

Neither of the rulings made any conclusions on where the breach happened. Though the first instance did speculate that it happened on the sender’s side.

This wasn’t decisive anyway, as this civil case just focused on the method of transport chosen by the Plaintiff.