Aurora officials say City Hall is digging through digital breadcrumbs after a cyberattack quietly slipped fraudulent payments out of municipal bank accounts. The suspicious activity surfaced at the end of April, and the city is still tracking where the money landed while working with banks to claw back what it can.
Officials confirm probe and federal awareness
According to the Chicago Tribune, Mayor John Laesch called the break-in "very sophisticated" and said the city identified the bogus activity on April 30, 2026. The Tribune reports that the money moved out as ACH transfers, and that the Aurora Police Department is actively investigating with the FBI notified and monitoring the case.
How the transfers moved and the city's cyber posture
ACH payments run through the Automated Clearing House network and can clear fast, which often makes it tough to freeze or reverse them once they are in motion. That risk is one reason attackers like automated transfers, a point explained in guidance from the Consumer Financial Protection Bureau.
Public records show Aurora moved in late 2025 to bolster its defenses, awarding a managed security services contract to NuHarbor Security and approving a KnowBe4 security-awareness training subscription for city employees. Those steps, detailed in City of Aurora Legistar documents and a separate council record, highlight recent investments in cybersecurity even as officials acknowledge that no system is completely attack-proof.
Funds, insurance, and oversight
Laesch declined to discuss any potential disciplinary measures while the investigation is underway and would not reveal how much money was taken, the Chicago Tribune reports. City leaders say some of the funds have already been recovered and note that Aurora carries insurance designed to cover incidents like this, although officials are still tallying the full financial fallout.
What comes next
For now, investigators are working with banking partners and federal authorities while auditors pore over transaction logs to trace where the money went and how the transfers slipped through. Residents and vendors who are uneasy about recent payments tied to the city are being urged to keep a close eye on account activity and rely on official Aurora communications for updates as the probe moves forward.
