CASE STUDY
Labor union recovers $5.5M from international bank account from fraudulent wire transfer
![Tradesmen enjoying lunchbreak together](/https/www.coalitioninc.com/_next/image?url=https%3A%2F%2Frp.liu233w.com%3A443%2Fhttps%2Fimages.ctfassets.net%2Fo2pgk9gufvga%2F7HIZPeRjByDGcCN9JWAS9G%2Fe60ef3dea5cec20d461e438ccfed25d3%2FCoalition_CaseStudy-Hero-FTFClawBack.png&w=3840&q=75)
Industry
Construction
Background
Employees: >1,000
Coverages: Funds Transfer Fraud, Breach Response
A union fell victim to a phishing scheme that eventually led to funds transfer fraud (FTF) of $6.4M. Instead of sending the money to an investment fund as they intended, the money went straight into a threat actor’s account. When the union called the Coalition emergency hotline, we set the wheels in motion to hunt down the wire transfer and start a forensic investigation¹ with Coalition Incident Response (CIR).²
Working closely with U.S. law enforcement, Coalition was able to track the funds to a fraudulent Chinese bank account. After assisting the policyholder with reports for both the FBI and the Hong Kong police department, $5.5M of the funds were frozen, diverted into a secure account, and ultimately seized by U.S. law enforcement. The Union’s FTF coverage³ kicked in for the funds that were not recovered, and the full cost of the forensics investigation was covered under the Policy’s Breach Response coverage.In just a few days, the Union’s $6.4+ million loss was reduced to around $500K.
Coalition² brings together active monitoring, incident response, and comprehensive insurance to solve cyber risk. To learn more, visit coalitioninc.com.
1. The claim scenarios described here are intended to show the types of situations that may result in claims. These scenarios should not be compared to any other claim. Whether or to what extent a particular loss is covered depends on the facts and circumstances of the loss, the terms and conditions of the policy as issued and applicable law.
2. Breach response included the engagement of an incident response firm; the insured selected Coalition Incident Response.