AI-Powered Deepfake Fraud Targets Boys and Girls Club of the Northern Plains, Stealing $200,000 The Boys and Girls Club of the Northern Plains fell victim to a sophisticated cyberattack, losing $200,000 from a reserve account tied to its Yankton, South Dakota, location. The incident, described as a "deepfake fraud" by CEO Jodi Hernandez, involved threat actors using AI-voice cloning and spoofed phone numbers to gain unauthorized access to the organization’s funds. Hernandez confirmed that no personal data was compromised and that the stolen money did not come from recent donations. The funds were part of a reserve account designated for building maintenance, and the organization does not expect the loss to disrupt its programs or services. In response, the Boys and Girls Club is overhauling its cybersecurity measures, including updating internal policies, enhancing staff training, and partnering with an external IT firm to prevent future attacks. Board member Reece Kurtenbach emphasized the organization’s commitment to learning from the incident and strengthening its defenses with expert guidance. Law enforcement, including the Yankton Police Department, is investigating the attack. Police Chief Jason Foote praised the organization for publicly sharing details of the incident, noting that such transparency helps raise awareness about the growing threat of AI-driven fraud. He warned that these attacks are difficult to detect, urging individuals and organizations to verify communications before responding to requests involving financial transactions. The Boys and Girls Club holds cybersecurity insurance, though it remains unclear how much of the stolen funds will be recovered. The case highlights the increasing sophistication of cybercriminals leveraging AI to bypass traditional security measures.