Officials reported that hackers stole nearly $500,000 from Carolina Beach through two cyberattacks occurring between late December and early January. Although the police investigation has concluded that no staff members were involved, the FBI is continuing to track the international sources believed to be responsible for the theft.
Town leaders recently disclosed that Carolina Beach lost approximately $487,994.80 across two separate security breaches discovered around the start of the year. The incidents, which officials described as devastating for the local staff, targeted the town's general fund through sophisticated methods. While the local police department has finished its initial inquiry, the FBI remains actively involved due to the international nature of the crimes. Investigators have indicated that these attacks may be linked to similar activity in other states where local governments are being systematically targeted by foreign actors.
The breach occurred despite a prior cybersecurity review conducted by the National Guard, which took place during a period of rising digital threats against government agencies. Town officials speculated that the hackers might have taken advantage of vulnerabilities present while the municipality was in the process of updating its internal security protocols. To prevent future losses, the town council has already adopted more rigorous financial policies, including the implementation of multiple checkpoints for money transfers and stricter password requirements for all employees.
Police and town management emphasized that no personal data belonging to residents was compromised during the attacks. The focus of the theft was strictly financial, aimed at municipal funds rather than the private information of the public. While the town is working with law enforcement to recover the stolen money, the process is complicated by the international scope of the investigation. Some bank accounts suspected of being linked to the hackers have been frozen, but it remains uncertain if the specific funds taken from the town are contained within those accounts.
Financially, the town expects to weather the loss due to its currently stable economic position, though insurance is only expected to cover a small fraction of the total amount stolen. The missing money will be accounted for through the town's general fund, and leaders have assured the public that essential services will not be disrupted. This incident follows a similar pattern seen in nearby regions, such as Pender County, which recently lost a larger sum to a comparable scam, highlighting a growing trend of cybercrime affecting North Carolina municipalities.
As the federal investigation continues, the town is focusing on long-term prevention and staff training to mitigate future risks. Cooperation remains high between local IT providers, law enforcement, and cybersecurity experts to ensure that defensive measures stay ahead of emerging threats. Public records related to the incident, including internal emails and insurance claims, have been requested to provide further transparency regarding how the money was authorized and transferred during the breaches.
Source: Hackers Steal Nearly $488K From Carolina Beach In Dual Cyberattacks