Apologies if this was posted before, it’s from November, cropped up in a trade magazine I read -
" It was not a good week for the Pathé cinema chains. First, their UK branch’s Twitter account was hacked and used in a cryptocurrency scam and then it became known that their Dutch branch had lost more than 19 million euros (US$21.5m) trough a business email compromise (BEC) scam.
The scam began in March with an email to the company’s CFO, allegedly from Pathé’s French parent firm, which told him to transfer more than 800,000 euros as part of a “strictly confidential” acquisition, Dutch business site Quote reports.
Though the CFO and the CEO did discuss among themselves that the request was rather strange, they did not appear to have considered that it might actually have been a fraud. Nor did they consider this possibility when several more requests followed, which again struck them as highly unusual, but to which they nevertheless dutifully obliged.
Only when the head office asked about the payments did they realise they had been a victim of a BEC scam. By that time, more than 19 million euros had been wired to the perpetrators."