Broken Bow Public Schools

Summary

Broken Bow Public Schools reported that a sophisticated phishing email, appearing to come from a trusted vendor and containing false payment instructions for an ongoing construction project, led to the transfer of $1.8 million to a fraudulent account. The district launched an investigation with the FBI, Nebraska State Patrol and the U.S. Secret Service, recovering nearly $700,000 of the stolen funds and working with its insurer to recoup the remainder. Despite the loss, construction continues without interruption, there will be no tax increases, and the district says it remains financially sound due to prior budgeting. New security protocols have been adopted, and the organization accepts full responsibility for the breach, noting that the public statement was delayed to allow law enforcement to complete its work.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Broken Bow Public Schools announced on Monday that a cybersecurity breach had resulted in a $1.8 million payment being directed to a fraudulent account. According to the district’s release, earlier in the spring the school system received a sophisticated phishing email that contained false payment instructions related to an ongoing construction project. The message appeared to come from a trusted vendor, which led the district to process the payment as requested. After realizing the payment had been sent to a fraudulent account, the district launched an internal investigation and notified law enforcement authorities. The announcement came after the district had time to work with investigators and verify the details of the incident.

The district reported that it is collaborating with the FBI, the Nebraska State Patrol, and the U.S. Secret Service to trace the stolen funds and identify those responsible. So far, investigators have helped the district recover nearly $700,000 of the stolen amount. Broken Bow Public Schools is also working through its insurance provider to attempt to recover the remaining funds. The district emphasized that construction projects will continue without interruption and that there will be no tax increases to cover the financial shortfall. It stated that its strong financial position, resulting from careful planning and budgeting, allows it to absorb the loss without affecting operational stability.

In response to the breach, Broken Bow Public Schools has adopted new protocols and security measures within its district office to prevent similar incidents in the future. The release acknowledged that the district takes full responsibility for the fact that these safeguards were not in place at the time of the attack and for the unfortunate circumstance that occurred. The district explained that it delayed issuing a public statement to allow law enforcement sufficient time to conduct their investigation without interference. The statement concluded by reaffirming the district’s commitment to keeping the community informed and to safeguarding public funds.

Sources

Sources available to members: 1 source.