Attackers deliberately go after individuals and small businesses with weak security, precisely because large companies have dedicated security teams. Always call the company directly, using a phone number you look up yourself, to verify any wire transfer before sending money. A hacked closing company can sit inside a compromised server for months, waiting for a large cash real estate deal before sending fraudulent wire instructions. Always call the company directly, using a phone number you look up yourself, to verify any wire transfer before sending money. Nearly all the account takeovers Eric saw traced back to a reused or weak password alone.