{"meta":{"database":"Global Social Engineering Impact Database","license":"CC BY 4.0 — attribute to Netarx Social Engineering Incident Database","url":"https://global-social-engineering-impact-da.vercel.app/incidents/2026-city-of-aurora-loses-1-1m-after-employee-falls-for-bank-impersonation-ca"},"incident":{"slug":"2026-city-of-aurora-loses-1-1m-after-employee-falls-for-bank-impersonation-ca","title":"City of Aurora loses $1.1M after employee falls for bank impersonation call","date":"2026-04-29","date_precision":"day","year":2026,"victim_org":"City of Aurora, Illinois","sector":"Government","country":"United States","primary_vector":"Vishing (Voice Phishing)","secondary_vectors":[],"ai_involvement":"No AI reported","ai_notes":"","outcomes":["Wire Fraud / Financial Loss"],"loss_usd":1100000,"loss_kind":"direct_loss","loss_note":"USD, approximately $1.1 million taken from municipal payroll accounts. Recovery efforts ongoing with law enforcement and the bank; the city carries insurance covering losses of this type.","records_affected":null,"threat_actor":null,"summary":"On 29 April 2026 a City of Aurora, Illinois employee took a call from someone posing as a representative of the city's bank and disclosed sensitive banking information. The caller used those details to make fraudulent transactions totalling nearly $1.1 million from municipal accounts. Officials found no evidence that city networks or data systems were compromised. Law enforcement, the bank and outside cybersecurity experts were engaged, and the city holds insurance for losses of this kind.","how_it_worked":"The pretext was routine banking business and the identity impersonated was the city's own financial institution, the party a finance employee expects to hear from about account matters. Officials described these schemes as exploiting trust and manufacturing urgency, and the deception worked purely by phone; nothing was hacked. The employee supplied account credentials or verification details during the call, which the fraudster immediately used to authorise transfers out of city payroll accounts. Discovery came shortly after the payments cleared.","lessons":"A hard rule that no banking detail or verification code is ever given on an inbound call, only on a callback to a number held on file, plus bank-side dual authorisation on outbound transfers.","confidence":"Confirmed","sources":[{"title":"Aurora lost nearly $1.1M from city bank accounts after employee fell for phone scam, officials say","url":"https://www.nbcchicago.com/news/local/aurora-lost-1-1m-from-city-bank-accounts-after-employee-fell-for-phone-scam-officials-say/3939104/","publisher":"NBC Chicago"},{"title":"'Social Engineering Fraud' Cost Aurora, Ill., Nearly $1.1M","url":"https://www.govtech.com/security/social-engineering-fraud-cost-aurora-ill-nearly-1-1m","publisher":"Government Technology"}],"entry_type":"incident","url":"https://global-social-engineering-impact-da.vercel.app/incidents/2026-city-of-aurora-loses-1-1m-after-employee-falls-for-bank-impersonation-ca"}}