Examples of D&O claims cluster into a handful of recurring patterns: breaches of fiduciary duty, failures of board oversight, securities fraud and shareholder suits, employment retaliation decisions made at the top, regulatory and criminal violations under statutes like Sarbanes-Oxley and the FCPA, and third-party claims from creditors or competitors. Each category can reach a director or officer personally, meaning a judgment can touch private bank accounts, investments, and real estate. Settlements and penalties routinely run into the millions, and some exposures are not insurable at all.
Breach of Fiduciary Duty
Fiduciary duty is the obligation to act in the company’s interest rather than your own. Courts generally split it into three strands, and a failure in any one of them opens the door to personal liability.
Duty of Care
The duty of care requires directors to make informed decisions: review the financials, consult advisors where appropriate, and genuinely deliberate instead of rubber-stamping management.1Legal Information Institute. Duty of Care A classic claim arises when a board approves a major acquisition without reviewing the target’s audits. If the target turns out to be insolvent or carrying undisclosed liabilities, the directors who skipped diligence can be sued for the loss. Courts look at process, not outcome. A deal that loses money after reasonable homework usually survives review; a deal approved after a 20-minute presentation with no questions asked does not.
Duty of Loyalty
The duty of loyalty bars directors and officers from putting personal financial interests ahead of the company’s. The textbook scenario is self-dealing: a director steers a lucrative contract to a firm in which they hold a hidden stake, or an officer negotiates a transaction on terms that quietly benefit a family member. When courts find a loyalty breach, they typically order disgorgement, forcing the individual to surrender every dollar of profit from the conflicted deal. The company can also recover losses from whatever better opportunity the tainted deal displaced.
Duty of Candor
Directors owe honest communication to fellow board members and shareholders. When the board seeks shareholder approval for a merger, stock issuance, or similar action, it must disclose all material information known to the directors that could affect the vote. Burying unfavorable appraisal data in footnotes or omitting a key risk factor from proxy materials can lead to claims that the shareholder vote was obtained through misleading disclosures. Courts ask whether the withheld information would have been important to a reasonable shareholder deciding how to vote.
Failure of Corporate Oversight
Some of the most damaging D&O claims don’t involve any single bad decision. They target directors for failing to monitor the company at all. A plaintiff must show that the board either never implemented a system to track legal compliance and operational risk, or that it put a system in place and then ignored the red flags it produced. The threshold is deliberately high. Directors aren’t liable just because something went wrong; the inattention has to be sustained enough to amount to a conscious disregard of responsibility.
These claims gain traction in heavily regulated industries. A food company whose board never set up any protocol for monitoring safety compliance faces a credible oversight claim when a contamination crisis hits. The same logic reaches pharmaceutical companies, financial institutions, and any business where regulatory failure carries existential risk. Once a court finds the board abdicated its monitoring role, the usual protections that shield directors from second-guessing fall away.
Securities and Shareholder Lawsuits
Shareholders are among the most active sources of D&O claims, and the dollars dwarf most other categories. The median settlement for securities class actions in 2024 was $14 million, with the average reaching $42.4 million. Those figures cover cases that settle. Trials can go higher.
Stock Drop Litigation
The most common pattern is a stock drop lawsuit. Officers release optimistic forecasts or conceal a known problem. When the truth surfaces, through a corrective disclosure, a regulatory investigation, or a whistleblower, the stock falls sharply. Investors who bought at the inflated price sue to recover the difference. Under Rule 10b-5, it is unlawful to make an untrue statement of material fact, or to omit a fact that would make other statements misleading, in connection with the purchase or sale of a security.2Legal Information Institute. Rule 10b-5 Plaintiffs must show the misstatement actually caused their losses, usually by pointing to the specific disclosure that corrected the market and triggered the price decline.
These suits almost always proceed as class actions, pulling thousands of investors into a single case. Beyond settlement dollars, the SEC can seek a court order permanently barring an individual from serving as an officer or director of any public company if the conduct shows unfitness to serve.3Office of the Law Revision Counsel. 15 USC 78u – Investigations and Actions That penalty effectively ends a corporate career.
Derivative Suits and Direct Claims
Not every shareholder lawsuit works the same way. In a direct claim, shareholders sue because they personally suffered harm, like being misled into buying overpriced stock. In a derivative suit, shareholders sue on behalf of the corporation itself to recover losses the company suffered from its own leadership’s misconduct. Money recovered in a derivative action goes back into the corporate treasury, not to the shareholders who filed.
Derivative suits carry a procedural hurdle. Before filing, shareholders generally must either demand that the board take action itself or show that making the demand would be futile because the board is too conflicted to evaluate the claim fairly. Clearing that bar is itself a signal that the board’s independence is in question.
Federal securities fraud claims also have a firm deadline. A private lawsuit must be filed within two years of discovering the facts that constitute the violation, and never more than five years after the violation itself.4Office of the Law Revision Counsel. 28 USC 1658 – Time Limitations on the Commencement of Civil Actions Arising Under Acts of Congress A well-concealed scheme can become lawsuit-proof if it stays hidden past the five-year outer limit.
Employment Practices Claims Against Leadership
D&O exposure reaches how leadership handles the workforce when board-level or executive decisions create the legal liability. Fire an executive who reported financial irregularities, and the directors who authorized the termination can be named personally in a retaliation suit. Federal whistleblower statutes, including provisions of Sarbanes-Oxley and Dodd-Frank, allow individual directors to be held personally liable for retaliating against a whistleblower.
Remedies in employment discrimination and retaliation cases aim to put the victim where they would have been without the misconduct.5U.S. Equal Employment Opportunity Commission. Remedies for Employment Discrimination That includes back pay from the date of termination through resolution, lost benefits, and, in cases involving intentional age or sex-based wage discrimination, liquidated damages equal to the full back pay amount. For a highly compensated executive, several years of back pay alone reaches seven figures before adding emotional distress or punitive damages.
Boards also face claims for tolerating a pervasive environment of harassment or discrimination. When leadership ignores repeated internal reports, shareholders or victims can sue the board for failure of oversight. Settlements in these cases often combine monetary payments with court-ordered changes to internal reporting and compliance structures.
Regulatory and Statutory Violations
Government agencies can go after individual directors and officers for corporate violations of federal law. Many of these penalties are non-insurable, so D&O coverage won’t respond.
Environmental Penalties
Environmental statutes impose steep per-day penalties on companies and, in some cases, their officers. Under the Clean Water Act, civil penalties reach $68,445 per day per violation. Violations of the Resource Conservation and Recovery Act, which governs hazardous waste, can trigger penalties up to $124,426 per day. Clean Air Act violations carry the same $124,426 daily maximum.6eCFR. 40 CFR 19.4 – Adjusted Civil Monetary Penalties These figures adjust for inflation. An officer who knowingly conceals a pollution issue to avoid cleanup costs watches daily penalties stack up fast, and criminal prosecution becomes a real risk.
Foreign Corrupt Practices Act
The FCPA prohibits offering or authorizing payments to foreign government officials to secure business advantages.7United States Department of Justice. Foreign Corrupt Practices Act An officer or director who willfully violates the anti-bribery provisions faces up to five years in prison and a fine of up to $100,000 per violation under the statute itself.8GovInfo. 15 USC 78dd-2 – Prohibited Foreign Trade Practices by Domestic Concerns Federal sentencing rules can push the fine higher in practice. These cases often start with payments by overseas agents or subsidiaries that trace back to authorization by U.S.-based executives.
False Financial Certifications
Sarbanes-Oxley requires CEOs and CFOs of public companies to personally certify the accuracy of financial statements filed with the SEC. A knowing false certification can bring a fine of up to $1 million and up to 10 years in prison. Willfully false certifications jump to $5 million and up to 20 years.9Office of the Law Revision Counsel. 18 USC 1350 – Failure of Corporate Officers to Certify Financial Reports This is one of the few areas where the statute explicitly names the individual officer rather than the entity, which makes personal liability impossible to deflect.
Data Breach Claims
Data privacy laws set requirements on how companies protect consumer information. After a significant breach, if the investigation finds the company had inadequate cybersecurity, regulators and affected consumers may pursue the officers who failed to invest in reasonable protections. These cases increasingly overlap with oversight claims, since a board that never asked about cybersecurity has a hard time arguing it exercised reasonable care.
Creditor and Competitor Claims
The relationship between directors and creditors shifts when a company becomes insolvent. While the company is solvent, directors owe their duties to the corporation and its shareholders, even if the business is stressed and approaching the edge. The legal shift happens at actual insolvency. Once a company cannot pay its creditors in full, those creditors gain standing to bring derivative claims against directors for breaches of fiduciary duty. They cannot sue directors directly for breach of fiduciary duty; the claims have to be brought derivatively on behalf of the corporation.
In practice, these suits allege that directors kept paying themselves bonuses, piled on reckless debt, or diverted assets to insiders while the company was sinking, depleting the pool available to legitimate creditors. Bankruptcy trustees frequently step into this role, bringing claims on behalf of all creditors collectively.
Third-party claims also come from competitors. If an officer authorizes the use of a competitor’s proprietary information to gain a market advantage, federal law gives the injured company a civil cause of action.10Office of the Law Revision Counsel. 18 USC 1836 – Civil Proceedings Criminal penalties for trade secret theft can reach 10 years in prison and substantial fines for individuals. These cases involve forensic analysis of how the information was obtained and used, and injunctions that can halt business operations while the case proceeds. The officer who approved it faces both civil and criminal exposure.
What Limits Personal Exposure
The Business Judgment Rule
The business judgment rule is the most important shield directors have, and it explains why many D&O claims fail despite bad outcomes. The rule creates a presumption that directors acted in good faith, on an informed basis, and in what they honestly believed was the best interest of the corporation.11Legal Information Institute. Business Judgment Rule When the rule applies, the plaintiff carries the burden of showing the directors fell short.
The protection disappears if a plaintiff can show gross negligence, bad faith, or a conflict of interest. At that point the burden flips, and the directors have to prove both the process and the substance of the challenged transaction were fair. That shift is where cases get expensive. A director who can point to board minutes showing thorough deliberation, independent advisor opinions, and disclosed conflicts stands in a far stronger position than one who approved a deal after a cursory review with no documentation. The rule rewards process, not results.
D&O Insurance and Indemnification
Most companies protect their directors and officers through a mix of indemnification provisions and D&O insurance. The two work together but cover different situations.
Standard D&O policies have three layers. Side A protects directors and officers personally when the company cannot indemnify them, typically because it is insolvent or legally prohibited from doing so. Side A has no deductible and covers legal costs, damages, and settlements the individual would otherwise pay out of pocket. Side B reimburses the company for amounts it spends indemnifying its directors and officers. Side C covers the company itself when named as a defendant, usually limited to securities claims for public companies. Side A is the layer directors should care about most, since in bankruptcy it is often all that stands between a director and personal financial ruin. Dedicated Side A policies, bought separately from the main tower, add a layer that cannot be eroded by the company’s own defense costs.
Policies do not cover everything. Fraud and intentional criminal conduct are excluded, though most policies advance defense costs until a court makes a final, non-appealable finding of fraud. That matters in stock drop cases, where fraudulent intent is often settled before trial, so the exclusion never triggers. Policies also typically exclude insured-versus-insured claims to prevent collusive suits between a director and the company, with carve-backs for whistleblower retaliation, bankruptcy-related claims, and derivative suits. Bodily injury and property damage fall under general liability, not D&O.
Corporate bylaws and state statutes govern whether a company must or merely may indemnify its directors. Mandatory indemnification cannot be revoked by a later board; permissive provisions leave the call to the company’s discretion. The practical difference shows up at the worst time, when a director is sued and the current board, possibly including the people who replaced them, decides whether to fund the defense. New directors should read the indemnification provisions carefully and consider whether a separate indemnification agreement adds protection beyond the bylaws.