Rated 5.0 from · 114 Google reviews MBE certified through OMWBE Serving Washington, Oregon, Idaho & Montana
Client Success Story | Cybersecurity
By Raj Sidhu, Founder & CEO, inTech Consulting, author of Beyond the Prompt: A Business Owner's Guide to Understanding AI
Published September 30, 2026
About this case study: The client's name is withheld for confidentiality. The scope, process, hours, and user counts come from the signed statement of work. Figures labeled "target" are the goals set for this scope, not independently audited results.
A Washington construction company with 6 office users and 6 shared jobsite kiosk accounts suffered a business email compromise (BEC). An attacker gained access to company mailboxes, which put invoices, vendor payments, and bid communications at risk.
The company had no managed IT provider and no documented security baseline. It called inTech Consulting to contain the incident, remove the attacker, and put controls in place so it would not happen again.
Business email compromise is the most expensive category of cybercrime reported to the FBI. The FBI Internet Crime Complaint Center (IC3) recorded nearly $2.8 billion in BEC losses in its 2024 Internet Crime Report, far more than ransomware.
Construction firms are a favorite target because money moves by email. Progress billings, change orders, subcontractor payments, and supplier remittance details all travel through the inbox. One altered bank routing number on a pay application can redirect a six-figure draw.
inTech scoped the remediation at 18 labor hours: 2 hours per full user account and 1 hour per kiosk account. Every one of the 12 accounts was treated as potentially compromised until proven clean, because attackers who get into one mailbox routinely pivot to others.
The project was led by inTech Security Technician Victoria Chevalier, with a dedicated project manager running kickoff, execution, and completion checkpoints.
A BEC cleanup has four jobs: cut off the attacker, find what they changed, close the door they used, and confirm the system is clean. inTech's process for this engagement followed that order.
Think your mailbox might be compromised? Unexplained inbox rules, vendors asking about emails you never sent, or password reset alerts you did not request are all warning signs. Talk to inTech today.
The statement of work defined success as a secure, fully operational email system with every compromised account remediated and no unauthorized access remaining.
| Measure | Result |
|---|---|
| Accounts reviewed and remediated | 12 of 12 (6 users, 6 kiosks) |
| Scoped remediation effort | 18 hours |
| Accounts enforcing MFA after cleanup | 100% (target) |
| Unauthorized inbox rules and forwarding left in place | 0 (target) |
| Repeat compromise in the first 90 days | 0 (target) |
The company moved to a fully managed security and IT agreement with inTech on a 2-year term, starting September 16, 2026. An incident is the most expensive way to discover you need a security baseline, and the managed agreement keeps that baseline in place.
The agreement covers all 6 office users as fully managed seats and the 6 kiosk accounts at a lighter support tier, since frontline crews only need limited access. It also includes a yearly allocation of project hours at no added labor cost, so follow-up hardening work does not require a new quote each time.
inTech's Managed IT is published at $200 to $250 per user per month, with cybersecurity included, not sold as a separate line. For a 6-person office, that puts the fully managed range at roughly $750 to $1,350 per month before licensing.
Full pricing, including co-managed IT at $75 to $150 per user per month, is on our IT services cost page.
Call your bank first if any payment went out, then call your IT provider. Banks can sometimes recall a wire if contacted within hours, and the FBI's IC3 Recovery Asset Team works directly with financial institutions on reported BEC transfers.
After that, do not just reset the one password you know about. Treat every account as suspect, remove inbox rules, and turn on MFA everywhere. Learn more about how we support contractors on our construction IT page and our cybersecurity services page.
inTech Consulting is based in Kent, Washington and supports businesses of 10 to 500 users across Washington, Oregon, Idaho, and Montana. Support is locally staffed with no offshore helpdesk.
inTech is a Minority Business Enterprise (MBE) and PWSBE certified through OMWBE, a member of PNDC, PNAA, and AWB, and holds a 5.0 rating across 114 Google reviews.
Get a security baseline before you need an incident response. Book a 30-minute call with Raj Sidhu at intechnw.timezest.com or call (206) 397-8070.
Business email compromise (BEC) is an attack where a criminal gains access to, or impersonates, a company email account to redirect payments or steal information. The FBI IC3 reported nearly $2.8 billion in BEC losses in 2024.
For a small business, a BEC cleanup typically takes one to three days of work. This engagement was scoped at 18 hours for 12 accounts: 2 hours per full user and 1 hour per kiosk account.
No. Attackers often leave inbox rules, mail forwarding, and active sessions that survive a password reset. A proper cleanup revokes sessions, removes persistence, and enforces multi-factor authentication on every account.
Construction payments move by email. Pay applications, change orders, and supplier remittance changes are routine, so a fraudulent request to update bank details looks normal to accounts payable.
inTech publishes Managed IT at $200 to $250 per user per month, and cybersecurity is included. For a 6-person office that is roughly $750 to $1,350 per month before software licensing.
