Breach taxonomy
Summary
On August 10, 2024, Orion S.A. disclosed that a company employee was the target of a criminal scheme resulting in multiple fraudulently induced outbound wire transfers to accounts controlled by unknown third parties. The company expects to record a one-time pre-tax charge of approximately $60 million for the unrecovered fraudulent transfers. No unauthorized access to company data or systems was identified. Law enforcement is cooperating and the company intends to pursue recovery through all available legal means including potentially available insurance coverage.
Tagging rationale
ThreatCyber Criminals
Filing explicitly describes a criminal scheme targeting the company via fraudulent wire transfer inducement → CYBER-CRIMINALS.
MethodsPhishing
An employee was fraudulently induced to authorize multiple wire transfers, a hallmark of business email compromise / phishing-based financial fraud → PHISHING.