The lesson Moline had already heeded was to have cyber insurance. Tokio Marine paid out $404,764 for losses the city suffered in a phishing scheme that directed wire transfers to a scammer.
The second lesson was prompted by the attack and its aftermath.
“Moline has since reviewed all of its internal control policies with the assistance of auditors and established several new protocols. One such practice is conducted by the information technology department, which sends fake phishing emails monthly to employees. If a phishing email is opened, the employee is provided additional training on recognizing phishing attempts.”