A Maine construction firm had nearly $600,000 stolen from its bank account and is suing the bank, claiming they are to blame for not monitoring accounts more closely.
Hackers hit Patco Construction Co.’s bank account at Ocean Bank of Delaware (also known as People’s United Bank) in May, ripping off the funds in 6 separate transfers over a week. The account, which was used for payroll, was completely emptied. As part of the account’s overdraft protection the bank took $223,237 from the company’s line of credit to cover the withdrawals.
Patco sued. They blame the bank saying the hacking is their fault and that Ocean did not do enough to monitor for suspicious activity. It is not yet clear how the hackers got into Patco’s account. Several employees had access to it with their own IDs and passwords. It’s likely a malware infected computer is involved, or someone with access fell for a phishing scam. So far, the bank has only been able to recover $243,406.
I’m not so sure the bank is to blame, but I don’t know what kind of security procedures their online banking site has in place. I do know that it was Patco’s responsibility to monitor their account and that giving multiple employees access to it was not smart. The more people who have access the more likely something will go wrong.