In December 2014, Nautilus Minerals, an underwater mineral exploration company, fell victim to a Business Email Compromise (BEC) attack in Dubai. A third-party attacker impersonated a legitimate business partner (MAC) and deceived Nautilus into transferring a $10 million deposit into a fraudulent bank account controlled by the hackers. The primary motive was financial gain, with the attackers intercepting the wire transfer between the two companies. Following the incident, Nautilus engaged a cyber-security firm to investigate the breach, secure its own and MAC’s networks, and prevent future attacks. The attack exposed vulnerabilities in the company’s email verification and financial transaction processes, leading to significant financial loss and reputational damage. While no sensitive data was leaked, the incident highlighted the risks of social engineering-based cyber fraud in high-value corporate transactions.