Ubiquiti
Security incident.

Ubiquiti disclosed USD 46.7 million in fraudulent overseas transfers involving employee impersonation and business email compromise.

$46.7M

FRAUDULENTLY TRANSFERREDGross transfer, not net unrecovered loss. The USD 18.6M recovery reflects the company's reported history through 2023.All incidents ↗

01 / DOCUMENTED FINDINGSPUBLIC-SOURCE ANALYSIS

WHAT HAPPENED

What the evidence shows.

The company reported recovering USD 18.6 million by March 2021. Its subsequent filings continued to disclose pursuit of the remaining USD 28.1 million.

MEASUREMENT / INTERPRETATION

What the number means.

Gross transfer, not net unrecovered loss. The USD 18.6M recovery reflects the company's reported history through 2023.

CONTROL QUESTIONS

How to test resilience.

Invoice-change verification, finance workflow approval paths, email authentication and independent callback processes.

Read cited source ↗

TURN LESSONS INTO VALIDATION

Find the path before an attacker does.

Discuss a scoped assessment ↗