IT Firm Loses $100,000 to Online Bank Fraud
Summary: A New Hampshire IT consultancy, Cynxsure LLC, learned on Feb. 11 that an unauthorized ACH batch had added 10 individuals to its payroll and moved $96,419.30 out of its account at Swift Financial, each recipient getting slightly less than $10,000. The bank issued a provisional credit, then withdrew it after saying it could not reverse the transfers, and the company's attorney is preparing to sue.
Why it matters: The owner used a single computer, ran repeated anti-malware scans that found nothing, and relied on a fingerprint scanner, yet the attacker answered two of his secret questions from another New Hampshire address - and one recipient, 26-year-old Merit Moll, was himself recruited through a fake work-at-home job and told to wire the money in $3,000 chunks to three people in Ukraine.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026