Cyber Incident Victim: Palisades Park
Date:
Jan 2019
Location:
United States of America
Summary
A municipal entity experienced a significant financial loss when approximately $460,000 was fraudulently transferred from its accounts held at Mariner’s Bank. The bank notified officials of the unauthorized transaction, which drained funds intended for taxpayer services. Borough administrators attributed the incident to failures in the bank’s internal security controls, emphasizing expectations that deposited public funds should be safeguarded against such breaches. The unauthorized wire transfer represented the sole confirmed impact, with no indication of additional compromised accounts or systems beyond the direct monetary theft.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On or around January 23, 2019, Palisades Park borough officials were notified by Mariner’s Bank that approximately $460,000 had been fraudulently transferred from municipal accounts. The Edgewater-based bank, which maintained seven branches in Bergen County, identified unauthorized wire transfers as the cause of the missing funds. Borough Administrator Dave Lorenzo publicly disclosed the incident on January 30, 2019, characterizing the event as a "massive failure of internal controls" by the financial institution. No specific technical details regarding the breach mechanism—such as compromised credentials, malware, or social engineering tactics—were disclosed in available reports. The incident exclusively impacted municipal funds held at Mariner’s Bank, with no indication that resident accounts or other borough financial systems were compromised.
The financial impact constituted an immediate loss of nearly half a million dollars from public coffers, prompting strong criticism from borough leadership regarding the bank’s security protocols. Lorenzo emphasized the expectation that taxpayer funds deposited in banking institutions should receive adequate protection, directly attributing responsibility for the breach to Mariner’s Bank’s operational failures. No public statements from Mariner’s Bank addressing the specific security lapses or outlining corrective measures were documented in the available source material. The borough’s response centered on public disclosure through media channels and demands for institutional accountability, though no legal actions or recovery efforts were detailed. The incident underscored vulnerabilities in municipal banking relationships without providing evidence of attacker attribution or broader systemic compromises beyond the fraudulent wire activity.