UK oil and gas company Zephyr Energy lost approximately £700,000 after attackers intercepted and redirected a routine contractor payment to an attacker-controlled bank account. The company described the attack as 'highly sophisticated,' though the exact method was not disclosed. Zephyr notified law enforcement and is working with banks and consultants to recover the funds. External consultants reviewed systems and confirmed operations are contained and unaffected. The company says it has sufficient working capital to absorb the loss, and has since added extra security layers around payment processes.
Sort: