eThieves Steal $217k from Arena Firm
Summary: Cyber thieves stole $217,000 from the Metropolitan Entertainment & Convention Authority (MECA) in Omaha after an employee opened a booby-trapped email attachment containing password-stealing malware, and the attackers used MECA's online banking credentials to add at least six money mules to the payroll. MECA had declined security options from First National Bank of Omaha, including a requirement that two employees sign off on every transfer, and recovered a $147,000 wire but lost more than $70,000 overall.
Bottom line: MECA's CFO said the two-signoff control was declined as administratively burdensome, and that had it been in place the theft would not have happened - a single approval step stood between the organization and a $217,000 loss.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026