In November, Athens, Ohio, officials sent nearly $722,000 to a bank account they believed was set up by its contractor, Pepper Construction, to receive payment for its work on a fire station headquarters. The request was actually a sophisticated cyber attack that took advantage of a construction payment system that often does not allow clients processing invoices to directly know those behind the email addresses making the requests.