The town of Plymouth, Connecticut, recently fell victim to a sophisticated "social engineering scam" that resulted in a loss of approximately $208,000, according to Mayor Joseph Kilduff. The incident has led to the resignation of the town's finance director, although half of the stolen funds have since been recovered.

Conn Mayor Scam $208K : Scam Details and Impact on Town

In a Facebook post on Wednesday, Mayor Kilduff revealed that Plymouth’s finance department had unknowingly sent two payments, each totaling $104,150, to scammers posing as a legitimate vendor. The fraudsters gained access to project information, enabling them to send invoices that appeared accurate and legitimate. Unfortunately, the finance department processed these payments without verifying the invoices, resulting in the significant financial loss.

"I regret to inform the Town of Plymouth that we recently fell victim to what is called a 'social engineering scam,'" Kilduff stated. He explained that the scammers had breached one of the town's vendors over a month before, and the vendor failed to detect the hack in time to prevent the fraudulent payments.

Social Engineering and Recovery Efforts

Social engineering is a manipulation technique used by cybercriminals to exploit human error, often leading to unauthorized access to sensitive information or finances. According to cybersecurity experts, these attacks prey on predictable human behavior, making them particularly effective.

Despite the initial setback, Plymouth has managed to recover one of the payments in full, amounting to $104,150, while efforts to retrieve the second payment are ongoing. Mayor Kilduff assured residents that the town's financial health remains stable, with no anticipated disruption to government services or payment obligations.

Resignation of Finance Director and Next Steps

Following the discovery of the scam, the town's finance director resigned immediately after a meeting with Mayor Kilduff. The town has enlisted the help of Twin Lakes Consulting of Salisbury, Connecticut, to provide interim financial management and other services while a search for a new finance director is conducted.

Plymouth's insurance company has been notified and is expected to cover any losses incurred. In addition, the local police department and the FBI have been alerted to the breach. It remains unclear whether Plymouth will pursue legal action against those responsible for the scam.

Conn Mayor Scam $208K : Ongoing Investigation and Security Measures

The breach highlights the risks associated with social engineering attacks and the importance of rigorous verification processes, particularly when handling significant financial transactions. Plymouth's experience serves as a cautionary tale for other municipalities and organizations to strengthen their cybersecurity measures and employee training.

As the investigation continues, Plymouth officials are taking steps to ensure that such an incident does not occur again, while working to fully recover the remaining stolen funds.