Can a Security Company Be Sued for Theft? Understanding Legal Liability in the UK

When you hire a security company, you place a significant degree of trust in their staff, processes, and professional standards. Whether they are guarding your commercial premises overnight, managing access at a retail store, or providing cash-in-transit services, the expectation is clear: they are there to protect your assets, not exploit them.

But what happens when the very people you hired to keep your property safe are responsible for stealing from you? Or when their negligence allows a theft to occur that could reasonably have been prevented? Can you sue a security company for theft in the UK, and if so, how far does that liability extend?

This guide explores the legal framework surrounding security company liability for theft in the UK, the types of claims that can arise, the contractual and common law considerations involved, and how specialist insurance plays a central role in these disputes.

The Core Legal Question: Vicarious Liability

The most important legal principle at the heart of any theft claim against a security company is vicarious liability. Under UK law, an employer can be held legally responsible for the wrongful acts of its employees, provided those acts were committed in the course of their employment.

The landmark Supreme Court judgment in Various Claimants v Morrisons Supermarkets plc [2020] refined the boundaries of vicarious liability in England and Wales, confirming that employers are not automatically liable for every act by an employee. However, when a security guard or operative steals from a client whilst on duty — using their position of access and trust to do so — courts may find that a sufficiently close connection exists between their role and the wrongful act to justify holding the employer liable.

In simpler terms: if a security guard uses their access to a client's premises to steal, the security company that employed and deployed that guard may well face a civil claim.

Direct Theft by Security Personnel

The most straightforward scenario is one where a security operative directly steals from the client. This might involve:

• Theft of cash from a retail till or safe during a shift
• Taking goods or stock from a warehouse or storage facility
• Removing equipment or valuables from an office or commercial property
• Accessing and sharing sensitive data or commercially valuable information
• Theft during cash-in-transit or high-value asset protection operations

In these cases, the individual operative would face criminal charges — and likely does. But the civil claim against the security company rests on whether they took adequate steps to prevent such conduct. Courts will examine:

• Vetting procedures: Did the company carry out thorough background checks, DBS screening, and employment history verification before deploying the operative?
• Training: Was the operative properly trained in professional conduct, legal responsibilities, and the company's ethical standards?
• Supervision: Were appropriate supervisory mechanisms in place to detect or deter misconduct?
• Contractual obligations: What did the service contract promise regarding staff vetting and standards?

If the company failed on any of these fronts, the aggrieved client has a credible basis for a civil claim in negligence or breach of contract — in addition to the direct theft itself.

Negligence Claims: When Theft Could Have Been Prevented

A security company can also be sued when theft occurs not by their own staff, but because of their failure to adequately protect against third-party theft. This is a negligence claim rather than a vicarious liability claim, but it can be equally damaging.

Examples include:

• A guard falling asleep on duty, allowing unauthorised access to a premises
• Failure to conduct proper patrols, leaving a known vulnerability unaddressed
• Inadequate CCTV monitoring that allowed a break-in to go undetected
• Failing to report suspicious behaviour that later resulted in a theft
• Not following agreed alarm response protocols after a breach

To succeed in a negligence claim, a claimant must generally establish:

1. The security company owed them a duty of care (established by the service contract and common law)
2. The company breached that duty by failing to meet the expected standard of professional conduct
3. That breach directly caused the loss suffered
4. The loss was reasonably foreseeable

This is often where disputes become complex. A security company may argue that it fulfilled its contractual obligations and that the theft occurred beyond its reasonable control. Claimants, meanwhile, must show that the company's specific failures had a direct causal link to the theft and resulting loss.

Breach of Contract Claims

Separate from the common law principles, security companies operate under a written service contract — and that contract is frequently the first document scrutinised when a theft claim arises.

Clients should pay close attention to:

• Limitation of liability clauses: Many security contracts include caps on the company's financial liability, often limiting it to the value of the contract or a fixed sum. These clauses are common but not always enforceable, particularly where the Unfair Contract Terms Act 1977 or the Consumer Rights Act 2015 applies.
• Exclusion clauses: Some contracts attempt to exclude liability for theft or dishonesty by employees. These clauses face significant scrutiny under UK law and may be held unenforceable if they are deemed unreasonable.
• Service level obligations: The contract should specify patrol frequencies, response times, staffing ratios, and vetting standards. If these were not met, a breach of contract claim becomes much more viable.

Courts apply a reasonableness test to limitation and exclusion clauses, particularly where there is an imbalance of bargaining power or where the clause would leave the claimant without meaningful remedy for a serious breach.

SIA Licensing and the Regulatory Framework

Security companies operating in the UK are regulated by the Security Industry Authority (SIA), which licenses individual operatives and sets minimum standards for training, vetting, and conduct. Holding an SIA licence requires passing a criminal record check, completing relevant qualifications, and adhering to the SIA's code of conduct.

If a security company deploys an unlicensed operative — or fails to properly verify that licences are current and valid — and that operative subsequently steals from a client, the company faces not only a civil claim but also potential regulatory enforcement action.

The SIA operates a licensing database that clients can use to verify operatives before they start work. Failure by the security company to ensure compliance with SIA requirements significantly strengthens a negligence claim.

The Role of Insurance in Security Company Theft Claims

When a theft claim is made against a security company, whether it succeeds or fails, the financial consequences can be severe. This is where specialist insurance becomes critical — both for the security company defending the claim and, in some cases, for the client making it.

Public Liability Insurance

Most security companies carry public liability insurance, which provides cover for claims arising from bodily injury or property damage caused to third parties. Depending on the policy wording, this may extend to cover theft claims brought by clients — although many standard policies exclude dishonest acts.

Fidelity or Employee Dishonesty Insurance

This is perhaps the most relevant cover in theft scenarios. Fidelity insurance — sometimes called crime insurance or employee dishonesty cover — protects businesses against financial losses caused by fraudulent or dishonest acts of their own employees. A security company with this cover in place has a mechanism to respond to claims arising from employee theft.

For clients, it is worth enquiring whether a prospective security provider carries this cover before entering into a contract. Its presence offers an additional layer of protection and reflects well on the company's professionalism.

Professional Indemnity Insurance

Professional indemnity (PI) insurance covers claims arising from professional negligence — including failures to deliver the contracted service to the expected standard. If a security company's negligence (rather than direct dishonesty) leads to a theft, PI cover may respond to the resulting claim.

Employers Liability Insurance

This is a legal requirement for any business with employees in the UK. While it primarily covers employee injury claims, employers liability policies are a baseline indicator that a security company is operating lawfully. A company without it should be avoided entirely.

What Businesses Should Do Before Hiring a Security Company

Prevention is always preferable to litigation. Before entering into any security services contract, businesses should take the following steps to protect themselves:

1. Verify SIA Compliance

Confirm that the company is SIA-approved and that all operatives who will work on your site hold valid individual licences. Use the SIA's public licence checker to verify this independently.

2. Request Proof of Insurance

Ask for certificates of insurance covering public liability, professional indemnity, employers liability, and — crucially — fidelity or employee dishonesty insurance. Reputable security companies will provide these without hesitation.

3. Review the Contract Carefully

Do not accept limitation or exclusion clauses without legal review, particularly those that cap liability at nominal amounts or attempt to exclude cover for dishonest acts. Negotiate these terms where possible.

4. Establish Clear Service Standards

Ensure the contract specifies patrol frequencies, check-in procedures, CCTV monitoring requirements, and escalation protocols. Documented service standards make it far easier to establish a breach if something goes wrong.

5. Conduct Your Own Due Diligence

Ask for references, check Companies House for the security company's financial standing, and look for memberships of professional bodies such as the British Security Industry Association (BSIA).

Making a Theft Claim Against a Security Company

If you have suffered a theft loss that you believe is the responsibility — in whole or in part — of your security provider, the following steps are recommended:

1. Report the theft to the police immediately and obtain a crime reference number. This is essential for both criminal prosecution and any subsequent civil or insurance claim.
2. Preserve evidence — CCTV footage, access logs, duty rosters, incident reports, and all written communications with the security company.
3. Notify your own insurer, as your business contents or commercial property policy may provide cover for the loss regardless of fault. Your insurer may then pursue a subrogated claim against the security company.
4. Notify the security company in writing, setting out the nature of your loss and your intention to seek compensation. This triggers their obligation to notify their own insurers.
5. Take legal advice from a solicitor with experience in commercial litigation or negligence claims. Many solicitors offer an initial consultation to assess the merits of a case.

In many cases, disputes are resolved through negotiation between insurers rather than formal court proceedings — but having strong documentary evidence and clear contractual terms is essential to achieving a fair outcome.

Frequently Asked Questions

Can I sue a security company if their employee steals from me?

Yes. Under the doctrine of vicarious liability, a security company may be held responsible for theft carried out by its employees whilst on duty, particularly where the employee used their position and access to commit the theft. The company may also be liable in negligence if inadequate vetting or supervision enabled the theft.

What if the security contract limits their liability?

Limitation of liability clauses are common in security contracts but are not always enforceable. Under the Unfair Contract Terms Act 1977 and related legislation, such clauses must satisfy a test of reasonableness. If they attempt to exclude all liability for serious breaches, including theft by staff, they may not hold up in court.

Do security companies need insurance in the UK?

All security companies with employees must hold employers liability insurance by law. Most also carry public liability insurance as a minimum. Reputable providers will additionally carry professional indemnity and fidelity (employee dishonesty) insurance. Always ask to see certificates before signing a contract.

What is fidelity insurance and why does it matter?

Fidelity insurance, also known as employee dishonesty or crime insurance, covers a business against financial losses caused by the fraudulent or dishonest acts of its employees. For a security company, this cover is particularly relevant as it provides a financial mechanism to compensate clients when staff misconduct — including theft — results in a loss.

Can my own business insurance cover a theft carried out by security staff?

It depends on your policy. Some commercial property and business insurance policies cover theft by third parties, including contractors. However, policies vary considerably in their treatment of this risk. Your insurer may also seek to recover the loss from the security company through a subrogation claim. Speak to your insurance broker to understand exactly what your policy covers.

What is the SIA and how does it relate to theft liability?

The Security Industry Authority (SIA) is the UK government body responsible for regulating the private security industry. It licenses individual security operatives and approved contractors. If a security company deploys an unlicensed operative who subsequently steals from a client, this regulatory breach significantly strengthens any negligence claim against the company.

How long do I have to bring a claim against a security company?

Under the Limitation Act 1980, most civil claims in England and Wales must be brought within six years of the date the cause of action arose. For personal injury claims this is reduced to three years. It is advisable to take legal advice and act promptly, as delay can affect the preservation of evidence and the viability of a claim.

Conclusion

The short answer to the question of whether a security company can be sued for theft is: yes, and in some circumstances, quite readily. Whether the claim is based on vicarious liability for an operative's direct dishonesty, negligence in failing to prevent a third-party theft, or breach of the terms agreed in the service contract, the legal avenues available to aggrieved clients are well-established.

The strength of any claim will depend on the quality of the evidence, the terms of the contract, and the degree to which the security company can demonstrate that it took all reasonable steps to prevent the loss. For businesses on either side of such a dispute, specialist insurance — including professional indemnity, fidelity, and public liability cover — is not an optional extra. It is an essential safeguard.

If your business operates in the security sector, or if you rely on contracted security services to protect your commercial assets, ensuring the right insurance arrangements are in place is one of the most important risk management decisions you can make.

To explore your options for security company insurance or commercial business protection, contact Insure24 today or call us on 0330 127 2333 for expert, impartial advice.