"We can patch operating systems all day long, but it's a lot harder to patch the human in us," cybersecurity expert Patrick Kelley said.
Kelley isn't surprised the city of Griffin got scammed.
"It happens every week," he said.
What is uncommon is how much money the crooks got. The scheme went through the city's water department. An email came through that looked legitimate from their vendor - P F Moon & Co. The email said they needed to change the banking information for the account, so the city employee sent it over.
"We get that these changes need to take place, but an email just isn't good enough," Kelley said.