Deepfake: IT service provider and software company, USA 2024
An employee received several calls, text messages and at least one voice message with the faked voice of the CEO.
- Incident · 04.2024 · USA
- Evidence: confirmed by an authority
- Deepfake
- Deception (social engineering)
- AI link
As of
What happened
The unusual channel WhatsApp and the artificial time pressure made him suspicious. He did not respond and reported the incident to the internal security team.
Role of AI: Audio deepfake of CEO Karim Toubba, according to reports probably trained on public recordings.
- Affected
- LastPass
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- unknown
- Bankruptcy
- no
- Entry point
- Calls, text messages and a voice message via WhatsApp with an audio deepfake of the CEO
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
CEO fraud, diverted payment, fake invoice
Mostly add-on 5 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Employees who recognise unusual channels and time pressure as warning signs and report them are the most effective defence.
Sources
- Attempted Audio Deepfake Call Targets LastPass Employee (opens in a new window) LastPass · 2024-04-10
«To be clear, there was no impact to our company.»
- LastPass: Hackers targeted employee in failed deepfake CEO call (opens in a new window) BleepingComputer · 2024-04
Similar cases
- Deepfake: IT service provider and software company, Poland 2025
- Deception (social engineering): IT service provider and software company, USA 2024
- Ransomware (extortion): IT service provider and software company, Switzerland 2026
- Ransomware (extortion): IT service provider and software company, Switzerland 2025