The FBI is investigating how two separate wire transfer payments were made from a Proviso High School District 209’s bank account in two separate cyberattacks that totaled more than $4.9 million.
Alexander Aschoff, interim superintendent for the district, said the district learned about the cyberattack June 21, more two months after the first attack on April 4, 2024.
According to Aschoff, the district was advised by Gilbane Building Company that two payments were not received.
It was determined that two separate wire transfers, one on April 4 for $949,062.42 and on June 14 for $3,993,114.61, were not received by the company but were sent to a third-party account.
“Upon discovering the attack, our administrative team began taking immediate steps to seek assistance to recover these funds,” Aschoff said.
The Proviso Township Treasurer’s Office, the FBI, and the banks involved in the wire transfer were notified, along with the district’s insurance provider.
“Our teams continue to work cooperatively with these entities to recover the funds and bring accountability to the persons responsible for the cyberattack,” Aschoff said.
The Proviso Township Treasurer’s Office could not be reached for comment.
According to Aschoff, the initial review determined that a singular account was breached and there is “no evidence” that additional accounts have been compromised.
The district also filed a police report June 24 with the Forest Park Police Department to document the loss, according to Aschoff.
According to the police report, Proviso Math and Science Academy is listed as one of the involved entities.
It was reported that a “false internet account” was created called Gilbane Building Company, which does have a business relationship with PMSA. The construction management company has been overseeing facility upgrades at D209 schools and has also awarded paid summer internships to D209 students in the past.
The Proviso Township Treasurer’s Office informed the district that as of July 3, they have been able to recover and reimburse $3,062,637.75, leaving $1,879,539.28 unaccounted for.
“We continue to work with the actively investigating agencies and our insurance carrier with respect to this matter and are confident at this time that we will recover all of the funds,” Aschoff said.
To ensure another attack does not take place, Aschoff said the district worked with other various entities to improve their security to “protect its technological systems” as well as make changes to protocols regarding wire transfers.
“The district has already put into place numerous different security measures to protect its technological systems and changes to the protocols for our business office in effectuating wire transfers,” said Aschoff. “We will continue to review our protocols and seek additional solutions moving forward to ensure that another attack such as this does not occur.”
The Chicago Field Division of the FBI is leading the ongoing investigation.