Save the Children says it fell for $1m cyber scam last year

One of the country’s best-known charities says it was the victim of a cyber scam last year that cost the company $1 million.

Save the Children Federation, which conducts charity operations in countries across the world, told the Boston Globe that hackers gained entry into an employee’s email account. The hackers then used fake invoices and other means to fraudulently direct about $1 million to a fraudulent entity based in Japan.

{mosads}By the time the attack was discovered, it was reportedly too late to stop the money transfer, disguised as payments for solar panels to be installed on health centers in Pakistan.

The organization told the Globe that in the months following the attack, Save the Children managed to recoup all but $112,000 of the losses through insurance claims, and has since adopted practices to guard against such scams and hacking attempts.

“We have improved our security measures to help ensure this does not happen again,” the group’s CFO Stacy Brandom told the Globe. “Fortunately, through insurance, we were ultimately reimbursed for most of the funds.”

A separate hacking attack resulted in the charity mistakenly sending $9,210 to hackers after one of the charity’s vendors was the victim of a cyberattack. That money was also recouped via insurance claims, according to the Globe.

Cyberattacks have become common in the U.S., with a Gallup poll released this week finding that one in four Americans have been affected by a cyberattack in some way.

Americans are now nearly 10 percentage points more likely to be affected by cyber crime than by physical theft of property, according to the Gallup poll.