Breach report · Government

Washington State City Loses More Than $280,000 of Public Funds in Phishing Scam

The City of Tenino, Washington lost $280,309 in public funds after a former treasurer fell for a phishing scam and wired money to fraudulent accounts.

Exploit: Phishing Company: City of Tenino, Washington Industry: Municipal Government Sources: https://www.govtech.com/security/washington-city-loses-280-309-to-successful-phishing-scam

The City of Tenino, Washington is down $280,309 in public funds according to the Washington State Auditor’s Office after a city employee fell for a phishing message that launched a business email compromise scam. Reports say that former Clerk Treasurer John Millard fell victim to a phishing message and paid cybercriminals a boatload of money, some without city council approval. The official reportedly initiated 20 automated clearing house payments from the city’s bank account to multiple out-of-state bank accounts. News outlets are also reporting that a warning was sent out to clerks about the phishing scam immediately but that didn’t stop this disaster from happening.

No specifics about any consumer/employee PII or financial data loss were available at press time.

More from the feed

Other incidents we've written up.

Want to know what this would look like for you?

A 30-minute call. No slides, no audit fee, no obligation. We ask what is breaking and tell you honestly whether we are the right fit.