In a sophisticated cyber scam, Orion, a leading carbon black supplier, has suffered a significant financial blow with the loss of $60 million. The Luxembourg-based company, known for its carbon black production—a crucial component in manufacturing tires, inks, batteries, and plastics—was compromised when an unsuspecting employee was manipulated into making unauthorized wire transfers to fraudulent accounts.
The company, while refraining from providing detailed comments on the incident, has taken formal steps to report the matter to the Securities and Exchange Commission (SEC). The fraudulent activity was detected on a Saturday, and the company promptly filed the necessary documents with the SEC.
An internal statement revealed that a non-executive employee fell prey to a criminal scheme, which led to the execution of several illegitimate wire transfers to accounts under the control of unidentified third parties. As a consequence, Orion anticipates a one-time pre-tax charge of roughly $60 million, assuming no further recovery of the transferred funds.
Orion has expressed its intention to recover the stolen funds through every legal avenue possible, including claims on insurance coverage that may apply to such incidents.
The Federal Bureau of Investigation (FBI) has consistently warned businesses about the increasing threat of cybercriminals targeting company employees, particularly those with access to financial resources. These criminals often impersonate high-ranking executives to coax employees into authorizing financial transactions.
Commonly known as business email compromise (BEC), these fraudulent schemes vary in approach but typically involve some form of impersonation or deceit to redirect company funds to bank accounts managed by the attackers.
In the previous year, the FBI reported that BEC fraud ranked as the second most financially damaging type of internet crime, with a staggering $2.9 billion in reported losses. The methods employed by scammers range from compromising vendor emails to phishing attacks aimed at stealing login credentials of employees with financial authority.
The FBI also noted a trend where scammers increasingly utilize custodial accounts at financial institutions, particularly those associated with cryptocurrency exchanges or third-party payment processors. These platforms are often used to quickly disperse the stolen funds, making recovery efforts more challenging.
Despite the efforts of police agencies, which have seen some success in reclaiming stolen funds and apprehending the culprits, FBI statistics indicate that between 2016 and 2022, over $43 billion was lost to BEC and email account compromise scams.
