The Government of Guam has recovered $1.6 million stolen in a cyberattack targeting the Judiciary of Guam and the Department of Administration.

According to officials, a known Judiciary email account was hacked in what’s known as a “spoofing” attack — allowing criminals to disguise themselves as a trusted source and send fraudulent instructions to divert routine inter-agency fund transfers to an off-island bank account.

The crime remains under active local and federal investigation, with limited details being released.

DOA director Ed Birn says once the government was alerted to the breach, “security protocols we have in place were quickly activated.” He added the recovery was possible because once the breach was known, “All the right moves were made” to have the money returned to the Government of Guam.

Officials say the theft was carried out entirely in cyberspace and are reminding the public: when it comes to online crime, if you suspect it, check it.