Cyber incident involving rerouted payment drains Zephyr of £700K

The Register reports that UK-headquartered oil and gas company Zephyr Energy had almost £700,000 stolen from its coffers following a cyberattack against its U.S. subsidiary that involved the rerouting of a single contractor payment, underscoring how sophisticated fraudsters can inflict significant financial damage without ever breaching core operational networks.

The company, which maintains its primary assets in the Rocky Mountain region of the United States, described the incident as a "highly sophisticated" manipulation of a routine payment process, resulting in funds landing in an account controlled by an unknown third party.

While Zephyr has engaged law enforcement and forensic consultants in a bid to recover the lost capital, the firm was quick to draw a firm line between this financial hit and the integrity of its broader technical infrastructure, noting that external reviews have confirmed the issue was contained and daily operations remain uninterrupted.

Though the exact vector of the intrusion remains undisclosed, the incident serves as an expensive prompt for stricter verification protocols surrounding changes to supplier banking details. The board assured investors that current working capital buffers are sufficient to absorb the blow without derailing ongoing development activities.

Written by

Kelley Damore Chief Content Officer CyberRisk Alliance

Kelley Damore is Chief Content Officer at CyberRisk Alliance, where she leads content strategy across the company’s digital brands, research, communities and live events serving CISOs and security practitioners. At CyberRisk Alliance, she is focused on delivering 365-day engagement, trusted journalism and actionable insights to help security leaders navigate an increasingly complex threat landscape.