[REVISION HISTORY]
Global business email compromise and cybersecurity response
Updated 1 time since CLSTR started tracking revisions of this situation.
What changed
2026-09-29 17:25 UTC → 2026-10-23 07:33 UTC ·
added
removed
Business email compromise (BEC) has emerged as remains a dominant cybercrime threat, causing significant financial and operational damage. In 2025, BEC accounted for over $3 billion in losses among nearly 25,000 victims, with specific regional data from Vermont showing 86 crimes totaling $13.1 million in losses. These breaches typically originate from phishing attempts where employees provide credentials to fraudulent login pages. pages for services like Microsoft 365 or Google Workspace. Once an account is compromised, attackers can access cloud storage, financial documents, and customer communications, often remaining undetected because the account appears to function normally. Recent data from cybersecurity firm Stoïk indicates a significant surge in activity, reporting a 60% increase in managed cyber incidents in September compared to the period preceding summer. This trend is largely driven by BEC attacks, which rose by 119% between May and September. Experts note that while artificial intelligence has not created new threat types, it has ‘professionalized and lowered the cost of executing attacks,’ allowing less technical actors to operate at scale. To mitigate these risks, organizations are encouraged to establish incident response plans plans, robust authentication, and a ‘circle of trust’ to manage legal and regulatory obligations. On a governmental level, the United States has moved to strengthen digital defenses through Executive Order 14390, aimed at disrupting transnational cybercriminal networks, and the Small Business Cybersecurity Assistance Evaluation Act of 2026, which addresses the vulnerabilities of smaller enterprises.
Versions
- 2026-10-23 07:33 UTC Global business email compromise and cybersecurity response
- 2026-09-29 17:25 UTC Global business email compromise and cybersecurity response
Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.