Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

Official: Puerto Rico Govt Loses $2.6M in Phishing Scam

Puerto Rico’s government has lost more than $2.6 million after falling for an email phishing scam, according to a senior official.

The finance director of the island’s Industrial Development Company, Rubén Rivera, said in a complaint filed to police Wednesday that the agency sent the money to a fraudulent account.

Puerto Rico’s government has lost more than $2.6 million after falling for an email phishing scam, according to a senior official.

The finance director of the island’s Industrial Development Company, Rubén Rivera, said in a complaint filed to police Wednesday that the agency sent the money to a fraudulent account.

Rivera said the government agency transferred the money on Jan. 17 after receiving an email that alleged a change to a banking account tied to remittance payments, according to a police statement.

Manuel Laboy, executive director of the agency, told The Associated Press that officials found out about the incident earlier this week and immediately reported it to the FBI.

“This is a very serious situation, extremely serious,” he said. “We want it to be investigated until the last consequences.”

Laboy declined to say how officials found out about the scam, whether anyone has been dismissed or how the company’s operations have been affected by the missing funds. He said an internal investigation is under way to determine whether someone was negligent or did not follow standard procedure, adding that government officials are trying to recover the money.

“I cannot speculate about how these things might happen,” he said, addressing heavy criticism from Puerto Ricans who were incredulous upon hearing the news.

Laboy added that his agency takes the management of public funds very seriously. “It’s a big responsibility.”

Advertisement. Scroll to continue reading.

Police did not return calls for comment.

The situation comes as the U.S. territory remains mired in a 13-year recession that has in part forced the government to cut back on some services.

Written By

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Cody Barrow has been appointed as CEO of threat intelligence company EclecticIQ.

Shay Mowlem has been named CMO of runtime and application security company Contrast Security.

Attack detection firm Vectra AI has appointed Jeff Reed to the newly created role of Chief Product Officer.

More People On The Move

Expert Insights

Related Content

Cybercrime

A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...

Cybercrime

The changing nature of what we still generally call ransomware will continue through 2023, driven by three primary conditions.

Cybercrime

As it evolves, web3 will contain and increase all the security issues of web2 – and perhaps add a few more.

Cybercrime

Luxury retailer Neiman Marcus Group informed some customers last week that their online accounts had been breached by hackers.

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Cybercrime

Patch Tuesday: Microsoft calls attention to a series of zero-day remote code execution attacks hitting its Office productivity suite.

Artificial Intelligence

The release of OpenAI’s ChatGPT in late 2022 has demonstrated the potential of AI for both good and bad.

Cybercrime

Satellite TV giant Dish Network confirmed that a recent outage was the result of a cyberattack and admitted that data was stolen.