Criminals deceive DeWitt County for more than $305,000

First cyber security crime in county history

 

  • DeWitt County Auditor Carrie Rea and County Judge Daryl inspect budgeted expenditures during a discussion at the July 11 regular meeting. Photo by Hans Lammeman.
    DeWitt County Auditor Carrie Rea and County Judge Daryl inspect budgeted expenditures during a discussion at the July 11 regular meeting. Photo by Hans Lammeman.
  • The DeWitt County Courthouse houses county staff and County commissioner’s court meetings. Photo by Hans Lammeman.
    The DeWitt County Courthouse houses county staff and County commissioner’s court meetings. Photo by Hans Lammeman.

    Editor's Note: Due to the breaking-news nature of this story, the article was updated as information became available on Monday, June 18.

    The first cyber security crime in DeWitt County history deceived county staff in June, according to County Judge Daryl Fowler.  This led to $305,301.75 being sent to an unverified bank account opened by a Nigerian citizen. 

     

    “On June 14, a county employee responded to an email from an approved vendor seeking to change its bank account information,” stated a July 18 DeWitt County press release. “The change would affect the electronic payment of future invoices approved by the commissioner's court. On June 27, the commissioner’s court approved invoices submitted by the approved vendor.” 

     

    County Judge Daryl Fowler explained Monday morning that employees are trained to follow a verification procedure, though it did not take place concerning this incident. Cyber security measures have been stepped-up as a result.

     

    “The email that requested a change of bank accounts was from a legitimate email address of an approved vendor,” Fowler wrote Monday afternoon. “Although unconfirmed, it is highly likely that a Yahoo email account was infiltrated by malware that captured keystrokes of the legitimate user and enabled the hacker to enter the password of the legitimate user to create an email without the legitimate user’s knowledge.”

     

    Law enforcement launched an investigation July 5 after County Auditor Carrie Rea noticed the electronic payment was made to an unverified bank account of the approved vendor. The press release stated that County officials believe this was an isolated incident, and no other immediate risks are known.  

     

    “The county has learned that its insurance carrier will pay a claim at the maximum policy limit of $250,000 less a small deductible,” wrote Fowler Monday afternoon. “Other avenues of recovery are also being explored.”

     

    “DeWitt County officials continue to work with law enforcement, the First National Bank of Shiner, and Bank of America in order to recover funds and minimize losses,” stated Monday’s release.