It's so easy to overlook how vulnerable small businesses are if something like this were to happen. I'm amazed this company was able to claw the money back – foreign wire transfers almost always are final within 24-48 hours. Clearly he had contacts and the thieves seemed to use US destinations for the transfers. This business owner even had a SecureID token to provide two factor authentication (vs just a simple password or password with a security question) and they still got in. If you computer starts acting odd and you do ANY online banking with it – get it checked out ASAP


Cybercrooks preying on small businesses
nakedsecurity.sophos.com
Small businesses might think they are little enough to escape cybercrooks' attention, but they're increasingly wrong.