Privacy Ninja



        • Secure your network against various threat points. VA starts at only S$1,000, while VAPT starts at S$4,000. With Price Beat Guarantee!

        • API Penetration Testing
        • Enhance your digital security posture with our approach that identifies and addresses vulnerabilities within your API framework, ensuring robust protection against cyber threats targeting your digital interfaces.

        • On-Prem & Cloud Network Penetration Testing
        • Boost your network’s resilience with our assessment that uncovers security gaps, so you can strengthen your defences against sophisticated cyber threats targeting your network

        • Web Penetration Testing
        • Fortify your web presence with our specialised web app penetration testing service, designed to uncover and address vulnerabilities, ensuring your website stands resilient against online threats

        • Mobile Penetration Testing
        • Strengthen your mobile ecosystem’s resilience with our in-depth penetration testing service. From applications to underlying systems, we meticulously probe for vulnerabilities

        • Cyber Hygiene Training
        • Empower your team with essential cybersecurity knowledge, covering the latest vulnerabilities, best practices, and proactive defence strategies

        • Thick Client Penetration Testing
        • Elevate your application’s security with our thorough thick client penetration testing service. From standalone desktop applications to complex client-server systems, we meticulously probe for vulnerabilities to fortify your software against potential cyber threats.

        • Source Code Review
        • Ensure the integrity and security of your codebase with our comprehensive service, meticulously analysing code quality, identifying vulnerabilities, and optimising performance for various types of applications, scripts, plugins, and more

        • Email Spoofing Prevention
        • Check if your organisation’s email is vulnerable to hackers and put a stop to it. Receive your free test today!

        • Email Phishing Excercise
        • Strengthen your defense against email threats via simulated attacks that test and educate your team on spotting malicious emails, reducing breach risks and boosting security.

        • Cyber Essentials Bundle
        • Equip your organisation with essential cyber protection through our packages, featuring quarterly breached accounts monitoring, email phishing campaigns, cyber hygiene training, and more. LAUNCHING SOON.

New Hampshire Town Loses $2.3 Million to Overseas Scammers

New Hampshire Town Loses $2.3 Million to Overseas Scammers

Peterborough, a small New Hampshire town, has lost $2.3 million after BEC scammers redirected several bank transfers using forged documents sent to the town’s Finance Department staff in multiple email exchanges.

BEC scammers use various tactics (including phishing and social engineering) to compromise or impersonate their targets’ business email accounts, allowing them to redirect pending or future payments to bank accounts they control.

Town officials discovered the attack on July 26 when the ConVal School District notified them that they didn’t receive a $1.2 million monthly transfer.

On August 18, while investigating this incident, Peterborough’s Finance Department staff discovered that two other bank transfers meant for a general contractor on the town’s Main Street Bridge project were diverted to attackers’ bank accounts.

Also Read: The Financial Cost Of Ransomware Attack

Stolen funds hard or impossible to recover

“Investigations into these forged email exchanges showed that they originated overseas. These criminals were very sophisticated and took advantage of the transparent nature of public sector work to identify the most valuable transactions and focus their actions on diverting those transfers,” Select Board Chair Tyler Ward and Town Administrator Nicole MacStay said in a press release published on Monday.

Finance Department staff targeted in this BEC scam are now on leave until an ongoing US Secret Service Cyber Fraud Task Force investigation is concluded. However, it is not believed that they were involved in the attack.

“We are now waiting to hear from our coverage provider if these losses will be covered, whether in whole or in part; town administration is exploring all options available and has reached out to our legislative delegation and the Governor’s office for support,” the town staff added.

“We do not believe that the funds can be recovered by reversing the transactions, and we do not yet know if these losses will be covered by insurance.”

The FBI warned in June of scammers impersonating construction companies in ongoing business email compromise (BEC) attacks to defraud their private and public sector clients.

In March, the FBI warned of another series of BEC attacks targeting US state, local, tribal, and territorial (SLTT) government entities, with losses ranging from $10,000 up to $4 million.

In May, Microsoft also detected a large-scale BEC campaign that targeted more than 120 organizations using typo-squatted domains.

Almost $2 billion lost to BEC scammers last year

FBI’s 2020 annual report on cybercrime affecting US victims lists a record number of complaints and financial losses last year, amounting to more than $1.8 billion in adjusted losses in 2020.

“The FBI’s Internet Crime Complaint Center (IC3) notes BEC is an increasing and constantly evolving threat as criminal actors become more sophisticated and adapt to current events,” the FBI said.

“There was a 5 percent increase in adjusted losses from 2019 to 2020, with over $1.7 billion adjusted losses reported to IC3 in 2019 and over $1.8 billion adjusted losses reported in 2020.”

Also Read: Lessons From PDPC Incident And Undertaking: August 2021 Cases

In previous alerts issued last year, the FBI warned of BEC scammers exploiting email auto-forwarding and cloud email services (including Microsoft Office 365 and Google G Suite) in their attacks.



Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!

Personal Data Protection


We have assisted numerous companies to prepare proper and accurate reports to PDPC to minimise financial penalties.


Click one of our contacts below to chat on WhatsApp

× Chat with us