COLUMBUS, Ohio — A northeast Ohio school district mistakenly sent more than $40,000 in public funds to a cybercriminal after falling victim to a payment redirect email scam, according to a state audit released Tuesday.
West Geauga Local Schools transferred $41,500 in October and November 2024 after receiving emails that appeared to be from a legitimate vendor requesting updated payment information. Auditors later determined the messages were part of a fraud scheme, and the money was sent to an account controlled by a scammer.
The findings were included in a financial audit issued by Ohio Auditor of State covering July 1, 2024, through June 30, 2025.
The district’s insurance provider reimbursed $36,500 of the loss. However, $5,000 — the policy’s deductible — remains unrecovered. A finding for recovery in that amount was issued against two district employees involved in the payment process.
Auditors noted the district did not follow state-issued guidance on preventing email compromise scams and had not implemented formal cybersecurity policies or employee training designed to detect payment redirection fraud.
A finding for recovery is a formal action requiring repayment of improperly spent or lost public funds.