Inside the Heist: How Hackers Stole Sh179 Million From Equity Bank
In a daring cybercrime incident that has sent shockwaves through the financial sector, Equity Bank fell victim to a sophisticated fraud scheme resulting in the loss of KSh 179 million. The audacious theft, executed between April 9 and 15, was uncovered by vigilant detectives from the Banking Fraud Unit under the Directorate of Criminal Investigations (DCI), who are now hot on the trail of 19 suspects connected to the crime.
The saga began when Equity Bank’s risk department noticed an unusual surge in transactions originating from the bank’s Incoming MasterCard GL. By the time the anomaly was flagged on a Monday morning, over Sh100 million had already been siphoned out of the bank’s system through a web of transactions involving M-Pesa and accounts in 11 other commercial banks.
Gerald Munyiri, Equity’s general manager for security and investigations, disclosed in a letter that a staggering Sh179.6 million had been fraudulently disbursed to 551 accounts within the bank during the targeted period. Additionally, investigators uncovered that Sh63 million was swiftly channeled to Safaricom’s M-Pesa platform, while another Sh39 million found its way into accounts across 11 different commercial banks.
The intricacy of the attack underscores the evolving tactics employed by cybercriminals to exploit vulnerabilities within financial institutions. The perpetrators strategically manipulated the bank’s systems, exploiting weaknesses to orchestrate a calculated heist over a span of just six days.
Equity Bank’s swift response to the breach and its cooperation with law enforcement reflect a concerted effort to contain the fallout and bring the perpetrators to justice. However, the incident raises broader concerns about the robustness of cybersecurity measures within Kenya’s banking sector, prompting calls for enhanced vigilance and investment in advanced security protocols.
As investigations unfold, the ramifications of this breach reverberate beyond Equity Bank, serving as a stark reminder of the persistent threat posed by cybercriminals in an increasingly digital landscape. Financial institutions must remain steadfast in fortifying their defenses to safeguard against future attacks and uphold the trust of their customers.
The story of how Sh179 million was brazenly spirited away from Equity Bank serves as a cautionary tale, highlighting the urgent need for proactive cybersecurity measures to thwart the relentless ingenuity of cyber adversaries.
