A
luxury property management company, Milford Entities/Management Company, lost nearly $19 million to a phishing scam in early July. The firm, which owns and manages high-end properties like Liberty View and Liberty Luxe in Battery Park City, fell victim to cybercriminals who sent a spoofed email that led to the massive transfer of funds.

    The email appeared to be from the Battery Park City Authority, but it was actually a fake account at TD Bank. The company's quarterly payment, which included ground-lease payments and taxes, was mistakenly transferred to this account instead of the BPCA's official account.

    A multiagency task force led by the Department of Homeland Security is investigating the incident. In a statement, Milford Entities acknowledged the scam and said it involved buildings directly owned or managed by the company.

    The Battery Park City Authority confirmed that it did not receive the quarterly payment due in early July. The BPCA also stated that its operations are not impacted by the incident and that it will continue to work with residents, property management companies, and law enforcement agencies as the investigation continues.

    The scam highlights the importance of cybersecurity for property owners and managers in Battery Park City. The BPC Homeowners Coalition sent out an email warning residents to review their cybersecurity policies, noting that this may not be the last cyber-attack in the neighborhood.