Case study of an email hack

Case Studies

Time and time again, email has proven to be the most popular means by which hackers target accounting firms.

3 out of 4 companies are receiving an increased number of email-based threats, according to a study conducted throughout 2021.

Email-based threats can range from simple phishing attempts to sophisticated ransomware attacks that can cause serious downtime to firms.

Email Security Case Study

Here’s a hack at an accounting firm that we witnessed recently.

This has been shared with the consent of the firm, with all identifying details redacted. 

  • Hackers gained access to the firm owner’s email
  • The hackers then sent emails to the accounts department asking for an international payment to be processed
  • Not suspecting anything was wrong, the payment as put through and the firm was out by $55,000 by the time they realized what had happened

Takeaways from this Case Study

What could be learned from this particular hack?

  • Email protection is important. How are your email systems currently being protected?
  • Team training can help mitigate the risk of a breach. We recommend that firms have an internal process to confirm payments like the example above via a second method of communication. Firm owners and practice managers like yourself also need to impress upon staff that they need to do their part in securing their firm as well.

Making sure your firm’s email systems goes a long way towards securing your firm. 

Reach out to our team today to learn how Practice Protect lets accounting firms secure their email systems.

 
Read more

Spotting The Phishing Scam

One in every 99 emails is a phishing email. Are your team members aware of the red flags that a crafty phishing email exhibits? Only one careless click is needed to expose your sensitive client data to malicious actors. Ensure that your team knows common red flags to look out for in a phishing email […] Read more

Why today’s Accounting firms need to look at password management

Let’s be honest, It’s difficult to create and remember secure passwords for a few different accounts, let alone the dozens of accounts you handle at your accounting firm every day. While retail password managers do a good job of keeping passwords in one place, they don’t have the advanced security features and access control that’s […] Read more