The Puerto Rico government fell for a phishing scam that bilked the U.S. territory out of $2.6 million — an incident that sounds like a possible business email compromise.
According to an Associated Press report, the Puerto Rico Industrial Development Company (PRIDCO), a government-run corporation created to promote the island as an investment destination, reportedly filed a police complaint last Wednesday, after the organization was tricked into transferring funds to an attacker-controlled account.
The monetary transaction took place on Jan. 17 after PRIDCO received a fraudulent email that falsely claimed there was a change to a banking account used to make remittance payments, the report continued, citing a police statement.
Manuel Laboy, executive director of the agency, reportedly told the AP that the attack was a “very serious situation,” and said the plot was discovered and relayed to the FBI earlier this week.
Puerto Rico has been beset by a series of hardships since 2017, including a government-debt crisis, the highly destructive Hurricane Maria, and a damaging earthquake that struck just last January.