Acme Co. receives an inquiry from one of their customers that they haven't received their order. Acme Co. has no record of the order, but the Customer provides proof of the order by providing the wire transfer receipt. Acme Co. identifies that the customer responded to a fraudulent solicitation from an employee of Acme Co. and wired the money to an offshore account.

Acme Co. called Blue Team Alpha to investigate and we found that user account information for Acme Co. Accounts Receivable personnel had been compromised by a nefarious group in Eastern Europe. The group used that account to send targeted messages to Acme Co.'s customers and then covered up their tracks to avoid raising suspicions. In all, four Acme Co. customers unknowingly sent money to accounts overseas, totaling $1.2M.

Blue Team Alpha was able to bring in the authorities to reverse the transactions, then investigated the cause of the initial breach that led to the compromise of the Accounts Receivable personnel account. The attackers had been lurking in Acme Co.'s data environment collecting information on the company for 283 days prior to anyone knowing that something was wrong.

Blue Team Alpha established several remediation solutions for Acme Co. and also recommended our Managed Security Operations Center services, which would be able to detect a breach immediately and take appropriate countermeasure actions in the future. We additionally recommended our Vulnerability Management services, as the original infiltration was due to a misconfiguration on Acme Co.'s network equipment that had left an out-of-date server exposed—a security hole that could have been patched before the problems began.

Based on our recommendation, Acme Co. then hired an independent third-party to perform a security assessment on their information systems. Once the assessment was completed, Blue Team Alpha worked with Acme Co. to remediate all of the deficiencies—administrative and technical—to help Acme Co. significantly improve the security posture of their information systems and the security maturity level.

Acme Co. received many operational benefits from Blue Team Alpha, including streamlined, automated, secure, and compliant business processes. The IT team at Acme Co. was able to focus on driving technical innovation, rather than focusing on monitoring their network for security threats and managing vulnerabilities in systems that they had already created. Acme Co. was able to meaningfully improve their processes and procedures without employing any additional employees, or the increased management and hidden costs of those resources.