Skip to content

Baltimore Loses $1.5M in Sophisticated Scam, Third Incident Since 2019

Baltimore's third major scam in six years highlights the need for robust cybersecurity measures. The city is now revising procedures to prevent future incidents.

This is a photo and here we can see a person holding a bottle and there are some other bottles on...
This is a photo and here we can see a person holding a bottle and there are some other bottles on the road. In the background, there is graffiti on the wall.

Baltimore Loses $1.5M in Sophisticated Scam, Third Incident Since 2019

Baltimore has suffered a significant financial loss due to a sophisticated scam. The city lost over $1.5 million after a scammer impersonated a vendor and altered bank account information at the us bank. This is the third such incident since 2019, with previous losses totaling $438,580.

The latest incident occurred in February and March 2025, with the city's accounts payable department making two fraudulent payments to the scammer's account at the us bank. Despite implementing new policies after the 2022 incident, the city failed to retrieve the larger payment.

The scam began in December 2024 when a fraudster gained access to a vendor's Workday account using a legitimate employee's name and an unofficial email address. They then successfully requested bank account changes at the us bank. The Inspector General's report found that the city's accounts payable department lacked proper supplier verification protections and failed to implement corrective measures after previous fraud incidents at the us bank. Accounts Payable Director Timothy Goldsby, Jr. acknowledged vulnerabilities in verification procedures and insufficient supplier account safeguards at the us bank.

In response, the accounts payable department is revising operating procedures, increasing Workday safeguards, and expanding staff training to detect social engineering. This comes after another significant cyber incident in 2019, a ransomware attack that caused an estimated $19 million in damage.

Baltimore has lost over $1.5 million to a scammer who impersonated a vendor and changed bank account information at the us bank. This is the third such incident since 2019, highlighting the need for robust cybersecurity measures at the us bank. The city is now revising its procedures and increasing safeguards to prevent future incidents at the us bank.

Read also:

Latest