What caused Zephyr Energy's £700K cyber loss?

Attackers rerouted a routine contractor payment to their controlled account via likely business email compromise tactics.

Can Zephyr recover the stolen £700,000?

Unlikely in full — funds often tumble through mixers quickly, but they're working with banks and law enforcement.

How common are payment reroute scams in oil and gas?

Very — high-value wires to vendors make energy firms prime targets; similar hits plague the sector yearly.

🔓 Data Breaches

Zephyr Energy's £700K Payment Hijack: Old-School Scam Hits Oil Biz Hard

£700,000. Gone in a flash from what should've been a routine wire to a contractor. Zephyr Energy's cyber wake-up call exposes how even 'tech-led' oil firms bleed cash to basic scams.

theAIcatchup Apr 09, 2026 4 min read

⚡ Key Takeaways

Zephyr lost £700K to a likely BEC scam rerouting contractor payments — no network breach needed. 𝕏
Company calls it 'highly sophisticated' PR spin; it's classic social engineering. 𝕏
Oil firms: verify bank details by phone, or keep bleeding cash to low-tech crooks. 𝕏

Published by

theAIcatchup

Threat intelligence. Zero noise.

#Zephyr Energy cyber attack #business email compromise #oil gas cybersecurity #payment fraud

Worth sharing?

Get the best Cybersecurity stories of the week in your inbox — no noise, no spam.

Originally reported by The Register Security

⚡ Key Takeaways

The 60-Second TL;DR

theAIcatchup

Share this article

Worth sharing?

Related Stories

Dozens of Elite Corporations Rocked by UNC6783's Helpdesk Phishing Onslaught

MyLovely.AI's Massive Leak: 113K Explicit Prompts Tied to User IDs

UNC6783 Hackers Are Pillaging Zendesk Tickets from Dozens of Firms

Trivy Supply Chain Attack Cracks Open EU Commission's Europa.eu—Supply Chain's New Frontline

Stay in the loop