Svitzer Marine Solutions, a global towage and marine services provider, fell victim to an email auto-forwarding cyber attack in Australia between May 27, 2017, and March 1, 2018. The breach involved three compromised accounts—finance, payroll, and operations—where up to 60,000 emails were secretly diverted to two external accounts controlled by attackers. The stolen data included sensitive employee information, such as tax file numbers, next-of-kin details, and superannuation account records, affecting over 400 employees—nearly half of the company’s Australian workforce. The prolonged exfiltration went undetected for nearly 10 months, exposing critical internal communications and personal data. The incident highlighted vulnerabilities in email security protocols, leading to significant internal data leakage with potential financial, reputational, and compliance repercussions for the organization.