Cyber Incident Victim: Manor Independent School District
Date:
Nov 2020
Location:
United States of America
Summary
A phishing scam targeting Manor Independent School District resulted in $2.3 million in losses through fraudulent bank transfers orchestrated over three transactions. An employee was deceived into altering a known vendor's payment details, enabling the theft during a month-long period preceding Christmas break. The incident, investigated by local police and the FBI as a business email compromise (BEC), involved impersonation tactics to intercept legitimate financial processes. Authorities reported strong leads and potential partial fund recovery, though outcomes depend on the attackers' sophistication and transaction trails. The district's operational budget underscored the severity of the financial impact from this coordinated attack.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The Manor Independent School District in Texas fell victim to a business email compromise (BEC) scam in November 2019, resulting in the theft of $2.3 million from district funds. Attackers deceived a district employee into altering bank account information for a legitimate vendor through fraudulent email communications. The scam unfolded over three separate transactions spanning one month, with the first fraudulent payment occurring in November and the final transaction concluding before Christmas break. District administrators publicly disclosed the theft in January 2020 upon returning from holiday vacation, though few operational details were released during the active investigation. The timing exploited the chaotic operational period preceding school holidays, when financial transactions typically increase. Law enforcement confirmed the attackers employed impersonation tactics common to BEC schemes, relying on subtle discrepancies in communication to avoid detection.
The financial impact represented a significant loss for the district, equivalent to approximately 2.5% of its $90 million 2019-2020 annual budget. Manor Police Department Detective Ann Lopez led the local investigation alongside the FBI, pursuing multiple strong leads identified during the initial inquiry. Authorities acknowledged the possibility of partial fund recovery depending on the attackers' operational sophistication and international money transfer trails, though no recovery was confirmed at the time of reporting. The incident caused operational disruption following the holiday break, requiring district administrators to address both financial shortfalls and procedural vulnerabilities. Investigations remained ongoing as of January 2020, with law enforcement examining digital evidence to trace the attack chain and identify perpetrators. The case highlighted growing BEC threats documented by the FBI, which reported a 100% increase in such attacks predominantly involving direct human intervention rather than automated tools.