Tioga, Pennsylvania, USA (Tioga County)

Summary

A packaging company in Tioga Borough fell victim to a cyber attack in which its email systems were hacked, resulting in the theft of approximately $10,000. Pennsylvania State Police in Mansfield were called to the company's location on 9 Fish Street to investigate the incident. The investigation confirmed the email compromise and the financial loss stemming from the unauthorized activity.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On February 26, 2025, Pennsylvania State Police based in Mansfield were called to a packaging company located at 9 Fish Street in Tioga Borough, Tioga County, Pennsylvania, in response to a reported theft. The business, situated in the small community of Tioga, discovered that it had been the victim of a cyber attack that resulted in the loss of ten thousand dollars. The incident came to the attention of the company and law enforcement only after the fraudulent transfer had already been carried out, prompting police to open an investigation into the circumstances surrounding the loss.

According to the investigation conducted by Pennsylvania State Police, the cyber attack was carried out through the compromise of the company's email system. An unknown actor gained unauthorized access to the company's email accounts, which allowed the attacker to intercept or manipulate business communications. Using this access, the actor was able to direct or facilitate the transfer of ten thousand dollars out of the company's accounts, effectively stealing funds through fraudulent means. The specific method by which the emails were used to accomplish the theft was not detailed in the available reporting, though the compromise of email credentials or accounts provided the attacker with the means to execute the unauthorized transaction.

The packaging company, whose name was not disclosed in the report, operated from the address on Fish Street in Tioga Borough and relied on email as a standard channel for business operations, including potentially communications related to financial transactions. The breach of the email system exposed the organization to financial loss, with the stolen amount totaling ten thousand dollars. The incident highlighted the vulnerability of small businesses to email-based fraud schemes, in which attackers gain access to internal communications and exploit that access to misappropriate funds. Following the discovery of the theft, the company reported the matter to state police, who responded to the location and began an inquiry into how the email compromise occurred and who was responsible.

Law enforcement's response centered on investigating the report of theft and determining the origin and method of the email compromise. Pennsylvania State Police in Mansfield took the lead on the case, though no information regarding suspects, arrests, or the recovery of the stolen funds was provided in the available source material. The investigation into the cyber attack and subsequent theft of ten thousand dollars remained ongoing as of the reporting date, with authorities working to identify the individual or individuals responsible for hacking the company's emails and orchestrating the fraudulent transfer. The incident added to a broader pattern of email-based financial crimes affecting businesses in Tioga County and across Pennsylvania, underscoring the persistent threat posed by cyber actors targeting business email systems for monetary gain.

Sources

Sources available to members: 1 source.