Back to News
technology

Hacker stole £700,000 from UK energy company by redirecting payment

Zack Whittaker
Loading...
3 min read
0 likes
⚡ Quantum Brief
A UK-based oil and gas company lost £700,000 (nearly $1M) after hackers redirected a contractor payment to a fraudulent account in April 2026. The breach targeted a U.S. subsidiary, with funds diverted mid-transaction. The attack mirrors a business email compromise (BEC), where hackers infiltrate email or accounting systems to alter payment details. The FBI reported BEC scams caused $3B in losses in 2025, ranking among top cybercrime threats. Zephyr Energy confirmed the incident is contained, with operations unaffected. The company claimed it followed "industry standard" security but added new safeguards post-breach. Recovery efforts involve banks and cybersecurity consultants, though success remains uncertain. The firm filed a London Stock Exchange disclosure but declined further comment. This case highlights persistent vulnerabilities in financial workflows, even among firms using standard protections. BEC attacks continue exploiting human and systemic gaps in payment verification.
AI Audio Summary
0:00 / 0:00
Click to play
Untitled design (34).png
Quantum News · Media Library

In Brief Posted: 8:31 AM PDT · April 9, 2026 Image Credits:Jon G. Fuller/VWPics/Universal Images Group / Getty Images Zack Whittaker Hacker stole £700,000 from UK energy company by redirecting payment British oil and gas company Zephyr Energy says someone stole £700,000 (close to $1 million) from one of its U.S.-based subsidiaries by redirecting a payment meant for a contractor into a hacker-controlled account. In a regulatory filing with the London Stock Exchange on Thursday, the company said it is “working with the corresponding banks and consultants to attempt to recover the diverted funds.” While the company did not say how the incident occurred, hackers are known to break into email inboxes or accounting systems and use that access to alter bank account and routing numbers during the process of paying someone or clearing an invoice. Known as business email compromise attacks, the FBI said in its most recent annual report published on internet cybercrime earlier in April that these attacks remain one of the top sources of financial losses, totaling more than $3 billion in victim losses during 2025. Zephyr says that its incident is contained and that its operations are running normally. As for the attack itself, the company said it used “industry standard practices” for its tech and payment platforms, but said it has implemented “additional layers of security” following the incident. A spokesperson for Zephyr did not return an email requesting comment about the incident. (via The Register) Topics business email compromise, cyberattack, energy, In Brief, Security April 30 San Francisco, CA StrictlyVC kicks off the year in SF. Get in the room for unfiltered fireside chats with industry leaders, insider VC insights, and high-value connections that actually move the needle. Tickets are limited. REGISTER NOW Newsletters See More Subscribe for the industry’s biggest tech news TechCrunch Daily News Every weekday and Sunday, you can get the best of TechCrunch’s coverage. TechCrunch Mobility TechCrunch Mobility is your destination for transportation news and insight.

Startups Weekly Startups are the core of TechCrunch, so get our best coverage delivered weekly. StrictlyVC Provides movers and shakers with the info they need to start their day. No newsletters selected. Subscribe By submitting your email, you agree to our Terms and Privacy Notice.

Related Security Hackers steal and leak sensitive LAPD police documents Lorenzo Franceschi-Bicchierai 1 day ago Security Developer of VeraCrypt encryption software says Windows users may face boot-up issues after Microsoft locked his account Zack Whittaker 1 day ago Security Iranian hackers are targeting American critical infrastructure, US agencies warn Zack Whittaker 2 days ago Latest in Security In Brief Hacker stole £700,000 from UK energy company by redirecting payment Zack Whittaker 4 hours ago Security WireGuard VPN developer can’t ship software updates after Microsoft locks account Zack Whittaker 22 hours ago Security Hack-for-hire group caught targeting Android devices and iCloud backups Lorenzo Franceschi-Bicchierai 1 day ago

Read Original

Tags

quantum-optimization
energy-climate

Source Information

Source: TechCrunch

Discussion

0 professional contributions

Sign in to join this professional discussion.

Be the first to add a constructive contribution.