{"meta":{"database":"Global Social Engineering Impact Database","license":"CC BY 4.0 — attribute to Netarx Social Engineering Incident Database","url":"https://global-social-engineering-impact-da.vercel.app/incidents/2016-austrian-aerospace-supplier-facc-loses-about-50-million-to-ceo-fraud"},"incident":{"title":"Austrian aerospace supplier FACC loses about €50 million to CEO fraud","date":"2016-01","date_precision":"month","victim_org":"FACC AG","sector":"Manufacturing","country":"Austria","primary_vector":"Business Email Compromise","secondary_vectors":["Spear Phishing (Email)"],"ai_involvement":"No AI reported","ai_notes":"No AI element reported; the impersonation was email-based, not a voice clone.","outcomes":["Wire Fraud / Financial Loss"],"loss_usd":54000000,"loss_note":"FACC reported damage of approximately €50 million (roughly US$54 million at the time); USD figures in press reports range from about $47 million to $56 million depending on exchange rate and date.","records_affected":null,"threat_actor":null,"summary":"FACC AG, an Austrian manufacturer of aircraft components for Airbus and Boeing, disclosed in January 2016 that it had lost about €50 million after criminals impersonating company leadership instructed staff to transfer funds for a purported acquisition project. The supervisory board subsequently dismissed the chief financial officer and, in May 2016, the chief executive officer over the incident.","how_it_worked":"Fraudsters sent email instructions that appeared to come from FACC's chief executive, framed around a confidential acquisition and directing finance staff to wire funds to foreign accounts. The framing discouraged the recipients from consulting colleagues, and the payments were released without independent confirmation. Part of the money was frozen in transit; the remainder was dispersed abroad. Austrian police later arrested an alleged accomplice tied to receiving accounts in Hong Kong. No malware or network intrusion was involved, which is why FACC described it as damage from a criminal act rather than a technical breach.","lessons":"A mandatory callback to a directory-listed number for any payment framed as confidential or urgent, plus dual sign-off on international transfers, defeats CEO fraud outright.","confidence":"Confirmed","sources":[{"title":"Austrian Firm Fires CEO After $56-million Cyber Scam","url":"https://www.securityweek.com/austrian-firm-fires-ceo-after-56-million-cyber-scam/","publisher":"SecurityWeek"},{"title":"Aerospace firm loses $47 million in cyber fraud, fires CEO","url":"https://www.bitdefender.com/en-us/blog/businessinsights/cyber-fraud-ceo-fired","publisher":"Bitdefender Business Insights"},{"title":"Cops nab accomplice in Austrian €50m caper","url":"https://www.thelocal.at/20160828/cops-nab-accomplice-in-austrian-50m-caper-facc-hong-kong/","publisher":"The Local Austria"}],"entry_type":"incident","slug":"2016-austrian-aerospace-supplier-facc-loses-about-50-million-to-ceo-fraud","year":2016,"loss_kind":"direct_loss","url":"https://global-social-engineering-impact-da.vercel.app/incidents/2016-austrian-aerospace-supplier-facc-loses-about-50-million-to-ceo-fraud"}}