The Mount Desert Island Regional School System (MDIRSS) in Bar Harbor, Maine, became a target of a cybercrime, resulting in the theft of over $1 million intended for a school construction project. The theft was discovered on a Tuesday when staff members became aware that the funds, which were supposed to be paid to Wright-Ryan Construction, had been transferred to a fraudulent account. School officials quickly notified local law enforcement and the FBI is now investigating the incident. The district also alerted its bank and insurance providers, disabling the compromised payment system.
The fraudulent transaction occurred on January 9 when a request to change the bank account information was processed by school staff.
On February 10, a legitimate payment request for $1,066,754 was submitted by the construction company, but the funds were unknowingly sent to the fraudulent account. While the account that received the funds has been frozen, the school district is still working to recover the stolen amount.
Although the situation remains under investigation, officials are hopeful that the full amount will be returned.
To prevent future incidents, the MDIRSS has launched a comprehensive review of its financial procedures with the help of its cybersecurity team. The district is reinforcing safeguards in the payment process to improve security and reduce risks. Additionally, accounts payable staff across the district will undergo advanced training to heighten awareness of security protocols and safeguard against similar cybercrimes. School officials are determined to strengthen the district’s cybersecurity and ensure more robust protection of financial transactions.
The MDIRSS serves multiple schools across the region, including Conners Emerson School, Cranberry Isles Schools, and others. Superintendent Mike Zboray assured the community that the district is monitoring the situation closely and will keep town officials and the public informed of any further developments. The district’s focus remains on securing the funds and preventing future cybercrime threats.
Reference: