Essex Region Conservation Authority

The Essex Region Conservation Authority (ERCA) is a Canadian organization headquartered in Essex Region, Ontario. In July 2020, ERCA fell victim to a phishing attack resulting in a $300,000 fraud loss. An impersonator posing as an internal staff member deceived an employee into authorizing two unauthorized electronic transfers to falsified accounts. The incident did not compromise donor funds or additional IT systems beyond the fraudulent transactions. Upon discovering the fraud, ERCA promptly notified its financial institution, law enforcement agencies, and insurance providers to initiate recovery and investigative processes.

Following the incident, ERCA implemented strengthened internal controls to prevent similar future breaches while maintaining regular operations. The organization confirmed its existing financial protocols were followed during the incident but initiated a comprehensive review of verification processes for electronic fund transfers. A criminal investigation into the fraud remains active, with authorities working to trace the transactions and identify perpetrators. ERCA emphasized its commitment to financial accountability and continuous improvement of cybersecurity measures in response to evolving digital threats. The incident underscored the persistent risks of social engineering attacks targeting organizational finance systems.