BIZ-8847: RESOLVED.

A retail jewelry business lost $300,000 in a business email compromise attack. Threat actors infiltrated Microsoft 365, monitored internal communications silently for weeks, then impersonated the company to redirect a major supplier payment.

A full Microsoft 365 forensic audit was conducted, identifying the compromised account and reconstructing the full attack timeline. Financial institutions were contacted immediately, and the case was coordinated with relevant law enforcement authorities to initiate recovery proceedings.