Hawaii Contractor Prevents Credential Harvesting Attack

• •Red Canary was the only vendor to detect the credential harvesting attack.
• •The attack was initiated by an employee clicking a malicious link.
• •The contractor plans to enhance its security posture and threat intelligence usage.

A large mechanical contractor in Hawaii successfully thwarted a credential harvesting attack, thanks to timely intervention from Red Canary. The incident occurred in late winter 2025 when an employee clicked a malicious link, compromising their credentials. Existing security solutions, including Crowdstrike and FireEye, failed to detect the breach, leaving the internal security team unaware of the compromise. Red Canary's proactive monitoring identified the anomalous behavior before it could spread, allowing for rapid remediation. The contractor, which serves various sectors including healthcare and education, recognized the importance of 24/7 threat detection and response. Despite budget constraints that nearly led to a shift away from Red Canary, the effective response solidified their partnership. The organization continues to enhance its security posture and plans to increase its use of threat intelligence to mitigate future attacks.