--- title: Scammer makes CAD $11 million off Canadian university in phishing hack description: Scammer makes CAD $11 million off Canadian university in phishing hack image: https://businessinsights.bitdefender.com/hubfs/phishing.png --- [![](https://businessinsights.bitdefender.com/hubfs/2021/09/logo-white.svg)](https://businessinsights.bitdefender.com/?hsLang=en-us) [![CONTACT AN EXPERT](https://hubspot-no-cache-eu1-prod.s3.amazonaws.com/cta/default/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd.png)](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd) - [For Home](https://www.bitdefender.com/solutions/) - [For Business](https://www.bitdefender.com/business/) - [Resources](https://www.bitdefender.com/business/resource-library.html) - [Webinars](https://www.bitdefender.com/business/webinars.html) # [BUSINESS INSIGHTS](https://businessinsights.bitdefender.com/?hsLang=en-us) [#Enterprise Security](https://businessinsights.bitdefender.com/topic/enterprise-security) By [**Luana Pascu**](https://businessinsights.bitdefender.com/author/luana-pascu) / Sep 04, 2017 # Scammer makes CAD $11 million off Canadian university in phishing hack Share this [![Share on email](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/email-color.png)](mailto:?subject=Check%20out%20https://businessinsights.bitdefender.com/phishing-educational-university&utm_medium=social&utm_source=email%20&body=Check%20out%20https://businessinsights.bitdefender.com/phishing-educational-university&utm_medium=social&utm_source=email) [![Share on twitter](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/twitter-color.png)](https://twitter.com/intent/tweet?original_referer=https://businessinsights.bitdefender.com/phishing-educational-university&utm_medium=social&utm_source=twitter&url=https://businessinsights.bitdefender.com/phishing-educational-university&utm_medium=social&utm_source=twitter&source=tweetbutton&text=) [![Share on linkedin](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/linkedin-color.png)](http://www.linkedin.com/shareArticle?mini=true&url=https://businessinsights.bitdefender.com/phishing-educational-university&utm_medium=social&utm_source=linkedin) [![Share on facebook](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/facebook-color.png)](http://www.facebook.com/share.php?u=https://businessinsights.bitdefender.com/phishing-educational-university&utm_medium=social&utm_source=facebook) The education sector is one of the most targeted by cybercriminals, partly because it often overlooks compliance with government regulations on security and data protection. Unlike other industries, education is not as well-trained on security guidelines, has little device protection in place, and unwittingly encourages a bring-your-own-device environment. Lacking proper security training, employees are more likely to click on a malicious link or fall victim to phishing or ransomware attacks. This was the case in Canada when MacEwan University in Edmonton, Alberta, fell victim to a phishing attack and transferred over CAD $11 million to a scammer impersonating a vendor, the university [confirmed](http://www.macewan.ca/wcm/MacEwanNews/PHISHING_ATTACK) on Thursday, after detecting the fraud on August 23. The Ministry of Advanced Education and the Office of the Auditor General were immediately informed of the phishing attack. “There is never a good time for something like this to happen,” said university spokesman David Beharry, “but as our students come back to start the new academic year, we want to assure them and the community that our IT systems were not compromised during this incident. Personal and financial information, and all transactions made with the university are secure. We also want to emphasize that we are working to ensure that this incident will not impact our academic or business operations in any way.” University staff was deceived by a number of emails asking them to change electronic banking details for one of their vendors. As the money was traced to accounts in Canada and Hong Kong, authorities in Edmonton, Montreal, London and Hong Kong are working closely with the institution to get the money back, as well as seeking more insights on the scam. For now, the funds have been frozen. "A large portion of the funds have been traced—$6,347,000—to a TD bank account in Montreal and were seized by a bailiff," Beharry [said](https://motherboard.vice.com/en_us/article/yww4xy/a-canadian-university-gave-dollar11-million-to-a-scammer) in an interview with Motherboard. "Investigations revealed that the balance of the funds were wire transferred to two accounts in Hong Kong. The university has initiated civil and criminal proceedings. We have hired legal counsel in Montreal and Hong Kong, and they are working on recovering the $11 million." The scam did not affect  IT systems and no personal or financial data was leaked. MacEwan University aims to retrieve the money as soon as possible, and assures students that its programs and initiatives will not be compromised. The university said the fraud could have been detected earlier, but a number of opportunities were missed. To avoid compromising the investigation, no details have been provided. More information will be released once the investigation is over. The vendor’s name hasn’t been made public, as the university is waiting for its approval. Organizations must accept that the next attack is right around the corner. Because they are the most frequent victims, schools and universities truly need to step up their game, as the number of phishing attacks has increased in the past year, as has all malicious activity. Phishing attacks are among the most lucrative deception methods and have grown in complexity, making them more difficult to detect, especially without proper security training. ### Explore More Topics - [Enterprise Security (743)](https://businessinsights.bitdefender.com/topic/enterprise-security) - [Threat Research (201)](https://businessinsights.bitdefender.com/topic/threat-research) - [Cloud Security (174)](https://businessinsights.bitdefender.com/topic/cloud-security) - [SMB Security (170)](https://businessinsights.bitdefender.com/topic/smb-security) - [Ransomware (166)](https://businessinsights.bitdefender.com/topic/ransomware) - [Privacy and Data Protection (137)](https://businessinsights.bitdefender.com/topic/privacy-and-data-protection) - [Cybersecurity Awareness (134)](https://businessinsights.bitdefender.com/topic/cybersecurity-awareness) - [Endpoint Protection & Management (126)](https://businessinsights.bitdefender.com/topic/endpoint-protection-management) - [Endpoint Detection and Response (124)](https://businessinsights.bitdefender.com/topic/endpoint-detection-and-response) - [Managed Detection and Response (119)](https://businessinsights.bitdefender.com/topic/managed-detection-and-response) - [Virtualization & Data Center Security (82)](https://businessinsights.bitdefender.com/topic/virtualization-data-center-security) - [Threat Intelligence (76)](https://businessinsights.bitdefender.com/topic/threat-intelligence) - [IT Compliance & Regulations (71)](https://businessinsights.bitdefender.com/topic/it-compliance-regulations) - [Bitdefender Threat Debrief (55)](https://businessinsights.bitdefender.com/topic/bitdefender-threat-debrief) - [Managed Service Providers (53)](https://businessinsights.bitdefender.com/topic/managed-service-providers) - [#Featured (52)](https://businessinsights.bitdefender.com/topic/featured) - [Advanced Persistent Threats (46)](https://businessinsights.bitdefender.com/topic/advanced-persistent-threats) - [Events (38)](https://businessinsights.bitdefender.com/topic/events) - [Independent Testing (18)](https://businessinsights.bitdefender.com/topic/independent-testing) - [Cybersecurity Advisory Services (9)](https://businessinsights.bitdefender.com/topic/cybersecurity-advisory-services) - [Podcast (3)](https://businessinsights.bitdefender.com/topic/podcast) - [top (2)](https://businessinsights.bitdefender.com/topic/top) See all topics ### Subscribe to Blog Updates ## Read more about this topic ### [More Business Websites Hit by Credit-card Skimming Malware](https://businessinsights.bitdefender.com/business-websites-hit-credit-card-skimming-malware?hsLang=en-us) ### [Major Mistakes That Can Leave Any CIO Jobless](https://businessinsights.bitdefender.com/mistakes-cios-jobless?hsLang=en-us) ### [A Quarter of Canadian IT Decision Makers Report Coronavirus-Themed Cyberattacks During Pandemic](https://businessinsights.bitdefender.com/a-quarter-of-canadian-it-decision-makers-report-coronavirus-themed-cyberattacks-during-pandemic?hsLang=en-us) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2685110570-png/Bitdefender-Mar2015-Theme/Images/avatar_img_footer.png) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2676149282-png/Bitdefender-Mar2015-Theme/Images/logo_white_footer.png) - [![https://twitter.com/Bitdefender_Ent](https://businessinsights.bitdefender.com/hs-fs/file-2658233851-png/Bitdefender-Mar2015-Theme/Images/ft_soc_tw.png?width=33&name=ft_soc_tw.png)](https://twitter.com/Bitdefender_Ent) - [![Linkedin-icon-300x300](https://businessinsights.bitdefender.com/hs-fs/hubfs/Bitdefender-Mar2015-Theme/Images/Linkedin-icon-300x300.png?width=33&name=Linkedin-icon-300x300.png)](https://www.linkedin.com/company/bitdefender-gravityzone-enterprise-security) - [![](https://businessinsights.bitdefender.com/hs-fs/file-2676149307-png/Bitdefender-Mar2015-Theme/Images/ft_soc_yt.png)](https://www.youtube.com/user/BitdefenderSecurity) - [Legal Terms](https://www.bitdefender.com/legal/) - [Privacy Policy](https://www.bitdefender.com/site/view/legal-privacy-policy-for-bitdefender-websites.html) - [EULA](https://www.bitdefender.com/site/view/legal-eula.html) - [Contact Us](https://www.bitdefender.com/business/contact.html) Copyright © 1997-2023 Bitdefender All rights reserved. ![](https://px.spiceworks.com/px/5rec) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Luana Pascu", "url" : "https://businessinsights.bitdefender.com/author/luana-pascu" }, "datePublished" : "2017-09-04T08:52:09.000Z", "headline" : "Scammer makes CAD $11 million off Canadian university in phishing hack", "image" : [ "https://businessinsights.bitdefender.com/hubfs/phishing.png" ], "mainEntityOfPage" : { "@id" : "https://businessinsights.bitdefender.com/phishing-educational-university", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://businessinsights.bitdefender.com/hubfs/Bitdefender_Logo_Transparent-2.png" }, "name" : "Bitdefender" } } ```