https://www.channelfutures.com/wp-content/themes/channelfutures_child/assets/images/logo/footer-new-logo.png
  • Home
  • Technologies
    • Back
    • SDN/SD-WAN
    • Cloud
    • RMM/PSA
    • Security
    • Telephony/UC/Collaboration
    • Cable
    • Mobility & Wireless
    • Fiber/Ethernet
    • Data Centers
    • Backup & Disaster Recovery
    • IoT
    • Desktop
    • Artificial Intelligence
    • Analytics
  • Strategy
    • Back
    • Mergers and Acquisitions
    • Channel Research
    • Business Models
    • Distribution
    • Technology Solutions Brokerages
    • Sales & Marketing
    • Best Practices
    • Vertical Markets
    • Regulation & Compliance
  • MSP 501
    • Back
    • 2022 MSP 501 Rankings
    • 2022 NextGen 101 Rankings
  • Intelligence
    • Back
    • Galleries
    • Podcasts
    • From the Industry
    • Reports/Digital Issues
    • Webinars
    • White Papers
  • Channel Futures TV
  • EMEA
  • Channel Chatter
    • Back
    • People on the Move
    • New/Changing Channel Programs
    • New Products & Services
    • Industry Honors
  • Resources
    • Back
    • Advisory Boards
    • Industry Organizations
    • Our Sponsors
    • Advertise
    • 2022 Editorial Calendar
  • Awards
    • Back
    • 2022 MSP 501
    • Channel Influencers
    • Circle of Excellence
    • DE&I 101
    • Channel Partners 101 (CP 101)
  • Events
    • Back
    • CP Conference & Expo
    • MSP Summit
    • Channel Partners Europe
    • Channel Partners Event Coverage
    • Webinars
    • Industry Events
  • About Us
  • DE&I
Channel Futures
  • NEWSLETTER
  • Home
  • Technologies
    • Back
    • SDN/SD-WAN
    • Cloud
    • RMM/PSA
    • Security
    • Telephony/UC/Collaboration
    • Cable
    • Mobility & Wireless
    • Fiber/Ethernet
    • Data Centers
    • Backup & Disaster Recovery
    • IoT
    • Desktop
    • Artificial Intelligence
    • Analytics
  • Strategy
    • Back
    • Mergers and Acquisitions
    • Channel Research
    • Business Models
    • Distribution
    • Technology Solutions Brokerages
    • Sales & Marketing
    • Best Practices
    • Vertical Markets
    • Regulation & Compliance
  • MSP 501
    • Back
    • 2022 MSP 501 Rankings
    • 2022 NextGen 101 Rankings
  • Intelligence
    • Back
    • Galleries
    • Podcasts
    • From the Industry
    • Reports/Digital Issues
    • Webinars
    • White Papers
  • Channel Futures TV
  • EMEA
  • Channel Chatter
    • Back
    • People on the Move
    • New/Changing Channel Programs
    • New Products & Services
    • Industry Honors
  • Resources
    • Back
    • Advisory Boards
    • Industry Organizations
    • Our Sponsors
    • Advertise
    • 2022 Editorial Calendar
  • Awards
    • Back
    • 2022 MSP 501
    • Channel Influencers
    • Circle of Excellence
    • DE&I 101
    • Channel Partners 101 (CP 101)
  • Events
    • Back
    • CP Conference & Expo
    • MSP Summit
    • Channel Partners Europe
    • Channel Partners Event Coverage
    • Webinars
    • Industry Events
  • About Us
  • DE&I
    • Newsletter
  • REGISTER
  • MSPs
  • VARs / SIs
  • Agents
  • Cloud Service Providers
  • Channel Partners Events
 Channel Futures

Security


Shutterstock

Phishing

Customer Loses $1.7 Million in Phishing Scam, Sues MSP

  • Written by James Anderson
  • January 24, 2020
The perpetrator infiltrated an internal email to pose as the business owner.

An Ohio company that fell prey to a $1.7 million phishing scam is suing its managed services provider.

Boardman Molded Products this week filed a lawsuit against Involta, which it says “failed to protect Boardman’s bottom line” with respect to a breach that took place two years ago. Threat actors gained access to an internal email account and sent six invoices to Boardman’s accounting team over the course of nine days.

The losses totaled $1,759,415, according to a police report .

Now Boardman is suing Involta for breach of service order, and professional negligence and malpractice. It claimed in its lawsuit filing that the MSP didn’t provide the necessary service or training required to stop the crime.

“Boardman relied upon the representations of Involta and accepted Involta’s offer to let Boardman’s IT staff focus on innovation and business-oriented tasks, while Involta was to protect Boardman’s bottom line with secure, highly-available services hosted in Involta’s enterprise-class facilities,” Boardman’s filing said.

Boardman is seeking more than $25,000, plus legal fees.

Involta claimed that the customer’s security policies “were too relaxed,” according to the lawsuit.

Boardman employees didn’t notice a problem with the invoices, as they came from the business owner’s email address and used his normal invoice template. The attackers were using the owner’s Outlook account; he’s owned the business since 1978. The accounting team authorized their bank to wire money to companies in Hong Kong and Cambodia, according to The Business Journal.

The plastic fabrication company and Involta in April 2017 signed a three-year contract totaling $10,995 in monthly recurring charges. Boardman informed Involta that it is terminating the contract.

The company reported the fraudulent invoices to the police on Jan. 25, 2018, and the FBI joined the search for the perpetrators. Boardman’s lawsuit claims that Involta listed the incident as medium priority when Boardman issued a service ticket.

“The day after the incident was first reported, Involta insisted that the breach had never taken place and accordingly closed the ticket,” the filing said.

Involta is an Iowa-based IT service provider that in 2015 acquired DRS, an Ohio-based MSP and consulting firm. A 2018 acquisition of another Ohio-based MSP brought its employee count up to 250. It operates more than a dozen data centers across the Midwest and Arizona.

Neither Boardman nor Involta responded to requests for comment.

You can read a copy of the lawsuit filing, which contains the original service contract and a rundown of Boardman’s complaints.

Boards of directors are concerned about #cybersecurity, too. Prepare for their questions with this article from @Gartner_inc https://t.co/AJexnDeGmq

— Involta LLC (@InvoltaLLC) January 23, 2020

Recent studies have shown that phishing attacks are a top fear for businesses, and cybercriminals seem to view phishing as a rising opportunity. Attackers last summer used this method to strike a prominent channel-focused vendor and attempt to infiltrate other members of the agent community. An AT&T Cybersecurity study found that 29% of businesses view phishing as their most concerning threat.

“One of the reasons they’re so profitable is, unfortunately, us. Human nature,” ProServeIT Corp‘s Marc Mendez wrote in a blog. “Threaten to freeze our accounts and we stop thinking rationally. Offer a bit of flattery and we’re likely to not perceive a threat. Threaten jail time, we panic. These are quite legitimate human vulnerabilities that threat actors prey upon to get us to abandon better judgment and click what they want us to click.”

ID Agent recently recommended two questions employees should ask to help spot nefarious email activity.

Tags: MSPs Business Models Data Centers Security Technologies

Most Recent


  • Cyber insurance
    Now Is the Time to Consider Cyber Insurance for Your Business
    If your business is online and accesses sensitive data, the need for cyber insurance is becoming critical.
  • Making Waves
    7 Channel People Making Waves This Week at Kaseya, AT&T, Cohesity, More
    Cloud-managed service is the fastest-growing area one analyst said in response to an MSP acquisition this week.
  • Job cuts
    RingCentral Announced Layoffs Ahead of Strong Earnings Growth in Q2
    RingCentral says changing business needs necessitate the job cuts.
  • Microsoft Adds Threat Intelligence, Proactive Hunting to Defender
    The new Microsoft Defender offerings come as the company encourages partners to offer more security.

Leave a comment Cancel reply

-or-

Log in with your Channel Futures account

Alternatively, post a comment by completing the form below:

Your email address will not be published. Required fields are marked *

Related Content

  • edge computing
    'Challenging Results' for MSPs in Channel Futures' Exclusive Quarterly Survey
  • White House
    White House Urges Companies to Take Ransomware Attacks More Seriously
  • Security shield on digital background
    VMware Security Connect Focused on Redefining Security, Increasing Threats
  • Fortune 500 2021 logo
    AT&T, Microsoft, Verizon, More Tech, Telco Companies Make Latest Fortune 500

Upcoming Events

View all

MSP Summit

September 13, 2022 - September 16, 2022

Channel Partners Conference & Expo

May 1, 2023 - May 4, 2023

Galleries

View all

Images: Telarus Hosts Partner Summit, Gives Partner, Supplier Awards

August 5, 2022

7 Channel People Making Waves This Week at Kaseya, AT&T, Cohesity, More

August 5, 2022

The Gately Report: Zscaler Tracks New, Increasingly Dangerous Ransomware Group, Most Targeted Types of People

August 5, 2022

Industry Perspectives

View all

Seize the Application Modernization Opportunity

August 2, 2022

A Growth Mindset: Your Organization’s Strategic Differentiator

August 1, 2022

Timely Tips for Non-Negotiable Patch Updates

July 29, 2022

Webinars

View all

Outsmarting RaaS: Implementation Strategies To Help Your Clients Before, During, and After a Ransomware Attack

August 23, 2022

Why it is Important to Upgrade Aging Servers and How to use Live Optics to Upgrade Efficiently

August 25, 2022

Executives at Home are Not Alright: An Intro to Digital Executive Protection

September 8, 2022

White Papers

View all

Work Goes Remote – (and Other Top ITOps Trends)

May 25, 2022

The New Bottom Line: How MSPs Can Meet the Healthcare Crisis While Evolving Their Businesses

April 19, 2022

How to build a Security Operations Center (on a budget)

April 4, 2022

Channel Futures TV

View all

Vonage a ‘Single Communications Stack Provider’ for Partners, Customers

IBM, Partners and the $1 Trillion Hybrid Cloud Opportunity

June 26, 2022

Agents Share ‘Secrets,’ Industry Opportunity

May 11, 2022

AT&T, Microsoft, Cisco, ThreatLocker on Unlocking Partner Potential

May 6, 2022

Twitter

ChannelFutures

.@ConnectWise says use #cyberinsurance policies to protect from worst of cyberattack repercussions, but first beef… twitter.com/i/web/status/1…

August 8, 2022
ChannelFutures

Check out our pictures from the #TelarusPartnerSummit that @telarus hosted in Salt Lake City.… twitter.com/i/web/status/1…

August 5, 2022
ChannelFutures

Channel People Making Waves This Week Include: @spoonen, @RoyArsan, @TheAnneChow, @AnuragTechaisle… twitter.com/i/web/status/1…

August 5, 2022
ChannelFutures

.@RingCentral plans #layoffs after strong Q2 earnings. dlvr.it/SW7kd5 https://t.co/OIlLuYgyLJ

August 5, 2022
ChannelFutures

.@msftsecurity makes upgrades to #MicrosoftDefender. dlvr.it/SW7cpg https://t.co/KbPsyM8eYe

August 5, 2022
ChannelFutures

.@ZeroFox goes public after #SPAC merger. #cybersecurity dlvr.it/SW7NjC https://t.co/IhaO9vgDh7

August 5, 2022
ChannelFutures

.@Mitel's new developer portal, and integration into CloudLink, creates a "vibrant" communications developer commun… twitter.com/i/web/status/1…

August 5, 2022
ChannelFutures

Boost security, secure #SoftwareSupplyChain in light of #Log4Shell breach, says @synopsys. dlvr.it/SW7GbT https://t.co/NlKeEFUlMS

August 5, 2022

MSP 501

The industry's largest and most comprehensive partner awards program.

Newsletters and Updates

Sign up for The Channel Report, Channel Futures Update, MSP 501 Newsletter and more.

Live Channel Events

Get the latest information on the next industry-leading Channel Partners event.

Galleries

Educational slide shows and images from live events.

Media Kit And Advertising

Want to reach our audience? Access our media kit.

DISCOVER MORE FROM INFORMA TECH

  • Channel Partners Events
  • Telecoms.com
  • MSP 501
  • Black Hat
  • IoT World Today
  • Omdia

WORKING WITH US

  • Contact
  • About Us
  • Advertise
  • Newsletter

FOLLOW Channel Futures ON SOCIAL

  • Privacy
  • CCPA: “Do Not Sell My Data”
  • Cookie Policy
  • Terms
Copyright © 2022 Informa PLC. Informa PLC is registered in England and Wales with company number 8860726 whose registered and Head office is 5 Howick Place, London, SW1P 1WG.
This website uses cookies, including third party ones, to allow for analysis of how people use our website in order to improve your experience and our services. By continuing to use our website, you agree to the use of such cookies. Click here for more information on our Cookie Policy and Privacy Policy.
X