In a cyberattack, the city of New Haven lost $6 million, but law enforcement has already recovered more than half of it.
The Chief Executive Officer and Chief Operating Officer of the Board of Education were the targets of a cyberattack known as a business email compromise.
In late May, thieves gained access to the CEO's email. They tried to steal money by listening in on talks and inserting themselves into the conversation seven times in June, six times successfully and one time unsuccessfully.
The city has stopped electronic transfers of money with the exception of payroll until further notice.
They are also working to strengthen computer security systems by engaging several outside companies.
Source: https://www.databreaches.net/ct-new-haven-board-of-education-victim-of-6-million-cyber-theft/
TPRM report: https://scoringcyber.rankiteo.com/company/new-haven-public-schools
"id": "new92012823",
"linkid": "new-haven-public-schools",
"type": "Cyber Attack",
"date": "08/2023",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'industry': 'Education',
'location': 'New Haven',
'name': 'Board of Education, New Haven',
'type': 'Government'}],
'attack_vector': 'Email Compromise',
'date_detected': 'late May',
'description': 'In a cyberattack, the city of New Haven lost $6 million, but '
'law enforcement has already recovered more than half of it. '
'The Chief Executive Officer and Chief Operating Officer of '
'the Board of Education were the targets of a cyberattack '
'known as a business email compromise. In late May, thieves '
"gained access to the CEO's email. They tried to steal money "
'by listening in on talks and inserting themselves into the '
'conversation seven times in June, six times successfully and '
'one time unsuccessfully. The city has stopped electronic '
'transfers of money with the exception of payroll until '
'further notice. They are also working to strengthen computer '
'security systems by engaging several outside companies.',
'impact': {'financial_loss': '$6 million'},
'initial_access_broker': {'entry_point': 'Email Compromise',
'high_value_targets': ['Chief Executive Officer',
'Chief Operating Officer']},
'motivation': 'Financial Gain',
'response': {'containment_measures': 'Stopped electronic transfers of money '
'with the exception of payroll',
'law_enforcement_notified': 'Yes',
'recovery_measures': 'Strengthening computer security systems',
'third_party_assistance': 'Engaging several outside companies'},
'threat_actor': 'Thieves',
'title': 'Business Email Compromise Attack on New Haven Board of Education',
'type': 'Business Email Compromise',
'vulnerability_exploited': 'Email Access'}