Carolina Beach Hit by Two Cyberattacks, Losing Nearly $500,000 in Government Funds Carolina Beach officials disclosed this week that the town fell victim to two cyberattacks in December 2025, resulting in the theft of $487,994.80 in public funds. The incidents prompted a joint investigation by the Carolina Beach Police Department and the FBI, which linked the attacks to an ongoing international probe in another state. Details on the attack methods remain undisclosed, though a press conference scheduled for later today may provide further updates. The town is working with its IT provider, law enforcement, and cybersecurity experts to recover the stolen funds, though its cybersecurity insurance covers only $25,000 of the loss. In response to the breaches, the town has implemented new security measures, including stricter password policies, enhanced staff training, and improved encryption protocols. These changes follow recommendations from a National Guard cybersecurity audit, conducted for the second consecutive year. Additionally, Carolina Beach permanently removed its public access terminal a town-owned laptop previously available for viewing internal emails and documents due to privacy and security concerns, though officials confirmed the terminal was unrelated to the cyberattacks. The incidents follow a similar case in Pender County, where scammers impersonating a water authority vendor stole over $650,000 between September and December 2025. The county transferred funds to a fraudulent account after receiving a fake request to update banking details.