Hacker stole £700,000 from U.K. energy company by redirecting payment

In a shocking incident, Zephyr Energy, a British oil and gas firm, reported the theft of £700,000 (nearly $1 million) from one of its subsidiaries in the United States. This significant loss occurred when hackers successfully redirected a payment intended for a contractor into an account controlled by them. The company disclosed the incident in a regulatory filing with the London Stock Exchange, revealing that efforts are underway to recover the stolen funds in collaboration with relevant banks and consultants. Details surrounding the breach remain vague; however, it is widely understood that cybercriminals often gain access to email accounts or accounting systems to manipulate bank details during payment procedures. This type of attack, known as business email compromise, has become a prevalent threat, with the FBI reporting over $3 billion in financial losses attributed to such schemes in their latest annual cybercrime report. Despite the breach, Zephyr Energy reassured stakeholders that its operations continue normally and that the situation is under control. The company stated that it followed “industry standard practices” for its technology and payments but has since strengthened its security measures in response to the incident. A spokesperson from Zephyr Energy has not yet commented on the matter, leaving many to speculate on the specifics of the hack and the future implications for the company.