An ATO-based BEC attack begins when one of your suppliers has one of their corporate email accounts compromised, usually via phishing. Business Email Compromise schemes involving a compromised email account at a business have increased 2,300% since 2015. You can (and should!) demand your suppliers implement an appropriate level of cybersecurity controls. Demand that your suppliers use multi-factor authentication on all of their email accounts. And if you see my neighbor, please tell him to clean up his act.”]

