The City of Mobile recently suffered a massive financial blow after a cyber fraud scheme resulted in the theft of nearly $15 million. according to the Alabama Securities Commission, attackers used publicly available information to impersonate trusted senders during a municipal bidding process.

Advertisement

The $15 million exploit of Mobile's public bidding data

The City of Mobile lost nearly $15 million in taxpayer funds through a scheme that relied on social engineering rather than technical hacking. amanda Senn, the executive director of the Alabama Securities Commission,noted that the criminals did not need to bypass the city's digital firewalls to succeed.

Criminals are increasingly weaponizing information found in public records, such as municipal bid details published in newspapers and on official websites. As reported by WSFA, the attackers spoofed emails to make them appear identical to legitimate correspondence that the city was actively expecting to receive. This highly tailored approach allows fraudsters to target specific municipal processes with surgical precision.

How AI-driven impersonation scales the threat for Alabama municipalities

Artificial intelligence has significantly lowered the barrier to entry for cybercriminals, enabling them to create highly convincing fake communications in minutes. amanda Senn warned that even low-level bad actors can now use AI to generate realistic fake emails, text messages, voice recordings, and images to deceive officials.

The rise of AI-enabled fraud represents a shift from traditional technical exploits to sophisticated psychological manipulation. By using AI to mimic the tone and identity of trusted vendors or colleagues, criminals can entice employees to click malicious links or authorize fraudulent transfers without raising immediate suspicion.

A $21 billion national crisis mirrored in Montgomery and beyond

The theft in Mobile is part of a much larger national trend of escalating cybercrime and financial loss.. The FBI reported an average of 2,700 fraud incidents per day last year,with total losses exceeding $21 billion.

Alabama municipalities are feeling the weight of this national crisis, with Senn noting that similar tactics have already been attempted in other parts of the state. This includes at least one incident in the Montgomery area, suggesting that the threat is not isolated to a single city but is a systemic issue affecting Alabama's local governments, businesses, and consumers.

Which unnamed Alabama cities have already been targeted?

While the Alabama Securities Commission has confirmed that multiple municipalities across the state have been affected, the specific identities of these cities have not been released. This lack of transparency leaves other local governments in a difficult position, as they may not be aware of the specific tactics being used against their neighbors.

The report leaves several critical questions unanswereed, including the total number of Alabama towns that have fallen victim to these AI-enhanced schemes. Furthermore, it remains unclear how many more municipalities in the Montgomery area or elsewhere are currently being targeted by the same overseas actors that Senn identified as a primary threat.