KPMG’s forensic audit revealed that Capillary’s Czech unit transferred €3.04 million to three foreign accounts between June 26 and July 2, a figure that falls far short of the company’s internal controls.
The audit described the scheme as a payment‑diversion fraud built on impersonation of executives and legal professionals, using a look‑alike domain ogier.co.uk and off‑channel WhatsApp messages.
No evidence of malware or email spoofing emerged, underscoring the fraud’s reliance on social engineering rather than cyber‑intrusion.
The four payments routed to HSBC Hong Kong and UOB Singapore left a trail that KPMG could not follow beyond the initial accounts, leaving the recovery of the €3.04 million uncertain.
Hospital shares have slipped 25% year‑to‑date, widening the gap with the sector average of 12% loss for FY‑2025. Analysts note the draconian hit to investor confidence.
Analysts caution that the firm’s upcoming earnings on December 15 will be scrutinized for any impact on its cash position and investor sentiment.