https://www.theregister.co.uk/2020/01/13/texas_school_phished/

A miscreant managed to swipe $2.3m from a Texas school district after staff inadvertently wired large sums of public money to the crook's bank account.

It appears either a hacker managed to compromise systems and alter account details, or a staffer was tricked into changing the information by social engineering. In any case, so far we know that a worker fell to a phishing email, internal records were changed, and money ended up being transferred to the wrong account – a criminal's coffers.