Cyber Incident Victim: Reidville Fire Department
Date:
Sep 2022
Location:
United States of America
Summary
Hackers compromised the Reidville Fire Department's email system, resulting in the theft of over $8,000 intended for employee paychecks. The fraudulent transfer prompted an investigation by the Spartanburg County Sheriff’s Office following a report from the Upstate fire department. The incident caused direct financial loss through diverted payroll funds.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On September 23, 2022, the Spartanburg County Sheriff’s Office responded to a fraud and payroll theft report at the Reidville Fire Department located at 3380 Highway 417 in South Carolina. The incident involved unauthorized actors compromising the fire department’s email system, enabling them to divert over $8,000 in employee paychecks. The theft occurred shortly before the report was filed, though the exact timeframe of the email breach remains unspecified in available records. Law enforcement initiated an investigation into the incident, classifying it as a cyber-enabled financial crime targeting a municipal emergency service provider. No technical details regarding the attack vector (e.g., phishing, credential theft) were disclosed in public reporting. The direct financial impact was quantified at $8,000, representing stolen wages intended for fire department personnel.
The payroll diversion disrupted standard compensation processes for Reidville Fire Department staff, though operational continuity of emergency services was not described as compromised. No information was released regarding the number of affected employees, specific accounts targeted by attackers, or potential secondary impacts beyond the immediate financial loss. The Spartanburg County Sheriff’s Office assumed primary investigative responsibility, with no reference to federal agency involvement or third-party forensic analysis in the source material. Recovery efforts and potential reimbursement of stolen funds were not detailed in public disclosures. The incident highlighted vulnerabilities in local government payroll systems, particularly among smaller agencies with potentially limited cybersecurity resources. Investigation status and final resolution outcomes remain undocumented in available reporting as of the incident’s public disclosure date.