$1.8 Million Stolen From US School District in Phishing Scam

Broken Bow Public Schools in Nebraska became the latest victim of cybercriminals when they lost $1.8 million to a phishing scam.

The attack targeted an ongoing construction project, showing how criminals research their targets before striking.

How the Phishing Scam Unfolded

The scammers sent a fake invoice that appeared to come from a trusted construction vendor. School officials, believing the payment request was legitimate, authorized an ACH transfer for the fraudulent invoice.

The criminals had clearly done their homework, knowing about the active construction project and which staff members handled payments.

This type of attack requires significant preparation. The scammers needed inside knowledge of the construction project, vendor relationships, and payment procedures to pull off such a convincing fraud.

Swift Response and Recovery

Once school officials realized they had been scammed, they immediately contacted federal authorities including the FBI, Nebraska State Patrol, and U.S. Secret Service.

Thanks to quick action from law enforcement, the district has recovered $700,000 of the stolen funds so far.

The school district assured the community that the construction project will continue without delays and no tax increases will be needed to cover the financial loss.

Growing Threat of Business Email Compromise

This attack represents a common cybercrime called business email compromise (BEC).

According to the FBI’s Internet Crime Report, they received over 190,000 phishing complaints in 2024, with total losses exceeding $70 million. These scams often target organizations during large financial transactions.

Criminals increasingly use artificial intelligence to make their phishing emails more convincing. They research targets on social media and public websites to craft personalized messages that feel authentic.

Final Thoughts

The Broken Bow incident should serve as a wake-up call to all organizations who need better cybersecurity habits before becoming the next victim.

Simple steps like calling vendors directly to confirm payment changes could prevent many of these costly attacks.

As scammers become more sophisticated, institutions must adapt their security practices to protect public funds.

For more information on this story, refer to the official press release from Rural Radio Network.

We want to know your thoughts. What do you think about this story? Let us know in the comment section below!

Be sure to stay up-to-date with the latest streaming news, reviews, tips, and more by following the TROYPOINT Advisor with updates weekly.