Wealth Fund Loses $10 million in "data breach"

Synopsis

In April 2020, the world's largest sovereign wealth fund discovered that they had been defrauded of over $10 million after falling victim to a business email compromise scam during communications about a transfer which was intended for a micro-finance institution in Cambodia in March.

The sophisticated scheme involved spoofing email addresses, fabricating payment information and then directing the stolen cash into a bank account controlled by the attackers. Allegedly the diverted funds were channeled into a bank account in Mexico under the same name as the micro-finance institution.

The delay in detection was linked to the pandemic, the attacker changed expectations as to when the money would arrive by sending the micro-finance company an email falsely attributing any delays in receipt of funds to the COVID-19 lockdowns.

Analyst

Courtenay Brammar

Experienced global enterprise risk and governance professional. Previously Vice President at Morgan Stanley, Deloitte Risk Advisory practitioner and PRMIA steering committee member in both London and New York.

Additional services

We offer a range of cost-effective, fixed-price training programmes and consultant services derived from the unique insights gained from all our case study data.

If you'd rather we did the heavy lifting in developing a cyber incident response plan or lessons learnt training for your organisation underpined by our unique insight into the challenges faced and strategies implemented by organisations countering today's cyber security threats then please contact us here.