Dear god...that put me off my breakfast! However a CFO who puts that much $ into "secret" accounts without a raft of checks & balances is mad! It's not $10 he's moving, so I would have thought he would have done (non-digital) due diligence immediately to verify (a) the Zoom meeting & (b) the $ involved. Not doing either by direct communication is a failure of diligence. While the article is frightening, it's also a reminder that without several-factor authentication (especially in this case), it's negligent.