US hospitals AI media incident — Nov 2026

Between 2024 and 2026, a sophisticated fraud network utilized AI-cloned voices and images to impersonate corporate executives and lawyers, successfully tricking employees into wiring millions of dollars to attacker-controlled accounts. Three individuals have been charged in connection with the $129 million cross-border scheme, which targeted US hospitals, a bank, and a UK fintech company.

What happened

The attackers employed a multi-stage social engineering process involving AI-generated impersonations. A perpetrator posing as a CEO would initiate contact with an employee to introduce a supposedly confidential transaction. The employee would then be referred to individuals posing as attorneys from major law firms to finalize the process. To ensure the success of these fraudulent transfers, the group utilized a handwritten script designed to discourage staff from discussing the payment internally or seeking verification.

The scale of the financial impact was significant, with reported losses including $11.6 million from a UK fintech firm and $4.8 million from a Missouri hospital system. Investigators determined that the stolen funds were moved through various international bank accounts before being converted into cryptocurrency. Following an investigation, suspects were arrested in Spain and Britain between June and September. The defendants face charges including wire fraud, aggravated identity theft, and money laundering. As technology makes deepfakes increasingly difficult to detect, security experts emphasize that secrecy, unusual payment instructions, and authority that cannot be independently verified are now the primary indicators of a potential scam.