What happened
FACC AG, an Austrian manufacturer of aircraft components for Airbus and Boeing, disclosed in January 2016 that it had lost about €50 million after criminals impersonating company leadership instructed staff to transfer funds for a purported acquisition project. The supervisory board subsequently dismissed the chief financial officer and, in May 2016, the chief executive officer over the incident.
How the deception worked
Fraudsters sent email instructions that appeared to come from FACC's chief executive, framed around a confidential acquisition and directing finance staff to wire funds to foreign accounts. The framing discouraged the recipients from consulting colleagues, and the payments were released without independent confirmation. Part of the money was frozen in transit; the remainder was dispersed abroad. Austrian police later arrested an alleged accomplice tied to receiving accounts in Hong Kong. No malware or network intrusion was involved, which is why FACC described it as damage from a criminal act rather than a technical breach.
AI involvement · No AI reported
No AI element reported; the impersonation was email-based, not a voice clone.
The control that would have caught it· our reading, not a claim from the sources
A mandatory callback to a directory-listed number for any payment framed as confidential or urgent, plus dual sign-off on international transfers, defeats CEO fraud outright.
Sources (3)
- Austrian Firm Fires CEO After $56-million Cyber ScamSecurityWeek·securityweek.comOpen ↗
- Aerospace firm loses $47 million in cyber fraud, fires CEOBitdefender Business Insights·bitdefender.comOpen ↗
- Cops nab accomplice in Austrian €50m caperThe Local Austria·thelocal.atOpen ↗
This entry summarises public reporting. It is not a legal finding, and details can change as investigations conclude. Found an error? Send a correction.