All it took to get almost a million dollars from a customer of a previous employer was to penetrate the e-mail server, collect a list of high-value accounts and a sample billing statement, then to send an e-mail with "updated" banking credentials for a large payment which was coming due.