Real-life casespring 2026
Supplier to a school, Somme
In spring 2026, in the Somme, hackers took over the mailbox of a school's supplier. They got in through a weak password or phishing, that is, a fake message that tricks people into giving away their password.
They read the correspondence and stole genuine invoices awaiting payment. They changed the bank details on the original documents, then requested payment from the supplier's genuine address.
The school paid into the fraudsters' account. In an alert dated 19 May 2026, the Somme gendarmerie put the loss at over 15,000 euros.