His Boss Called. It Wasn’t His Boss. €220K Gone.

Estimated Exposure: €220,000

What happened: The employee received a phone call from the CEO. Sounded exactly like him. Tone, pacing, everything. Requested an urgent €220,000 wire transfer. The employee authorised it immediately. It was AI-generated audio cloned from publicly available recordings. Your voice is on your voicemail. On your website. On every Zoom you’ve ever been on. “Hey mate, transfer $15K to the supplier, I’m driving, sort the paperwork later.” That’s all it takes. And it sounds exactly like you.

Source: Wall Street Journal / Trend Micro, 2019

What Happened: $235,400 Gone — Victim Found Legally Liable – Legal Precedent, WA

Explore More Case Studies

$235,400 Gone — And the Victim Got the Blame. WA Court.

Estimated Exposure: $235,400 stolen. Only $43,000 recovered. Victim ordered to pay.

What Happened: Mobius Group sent a legitimate invoice to Inoteq — a WA resources company. Hackers intercepted the email chain and sent a near-identical invoice with different bank details. Inoteq paid $235,400 to the wrong account. Standard BEC attack. Happens every day. But heres the precedent: when Mobius sued, the WA District Court found that INOTEQ — the victim who got scammed — was partly liable. The court said they should have verified the payment details. First major Australian court ruling on BEC liability. The business that got defrauded was ordered to pay back the money.

The Message: “I didnt know” is no longer a defence in Western Australia. The courts have ruled. If you dont take reasonable steps to verify and protect, the liability lands on you — even when youre the victim.

Source: [2024] WADC 114, HWL Ebsworth Legal Analysis

What Happened: BEC invoice fraud. $235,400 stolen, only $43K recovered. WA District Court ruled the VICTIM was legally liable.

View Case Study

106 GB of Employee Data — Published. Perth Company.

Estimated Exposure: 106+ GB corporate and employee data exfiltrated and published on the dark web.

What Happened: Pressure Dynamics International — a WA-based hydraulics and industrial company servicing oil, gas, offshore, and defence — got hit by DragonForce ransomware in 2025. The attackers didnt just encrypt. They exfiltrated over 106 gigabytes of corporate and employee data before locking the systems. Then they published it. Employee records. Corporate documents. Client details. All of it — available to anyone who knows where to look. This is the kind of business Perth tradies work around every day. Supplying rigs, maintaining equipment, servicing the industries that keep WA running. If they can get hit, your business is not too small to be a target.

The Message: Automated scanners dont care what industry youre in. They scan every IP, every domain, every exposed service. If your website or systems have a known vulnerability, youre on the list. The only question is when.

Source: Cyber Daily Exclusive, 2025

What Happened: DragonForce ransomware hit a WA industrial company. 106+ GB exfiltrated and published.

View Case Study

Get Certified Before
You're the Next Headline

Dummy text

Start My Protection Now