This Wall Street Journal Article features Bernstein Shur Attorney Dan Mitchell.

Banks typically are responsible for losses when personal accounts are hacked. But commercial clients that fall victim to cyber theft have to show that banks didn’t do enough to protect their money.

While not axiomatic, it’s generally true that big companies have better security than small businesses, and hackers know this. So small businesses get hacked and absorb the losses. Unless they sue their banks.

Please see full article below for more information.