Key Takeaways: The City of Baltimore lost over $1.5M in a business email compromise (BEC) attack in early 2025. BEC attacks are on the rise—it’s not a matter of it but when it will happen to your organization. Although the fraudster used an email address that wasn’t issued by the vendor, the city employees didn’t verify this information (typical city employees…?). The Growing Risk of BEC AttacksThe Baltimore scam is only one of the growing number of business email compromise (BEC) attacks worldwide. BEC Attacks Are Inevitable But PreventableWhen it comes to BEC attacks, it’s not a question of if but when it could happen to you.