A September email phishing attack in which online thieves stole paychecks from 27 Atlanta Public Schools employees will cost the district roughly $300,000.

Online scammers tricked unsuspecting employees into clicking on a fake link that allowed thieves to access payroll login information and reroute direct deposits. The district immediately announced it would repay employees for the stolen paychecks, which cost the district $56,459.

As part of its response to the attack, APS spent $150,000 for a one-time “forensic investigation” done in coordination with law enforcement to review the breach, according to a district spokesman. The district also will spend $32,653 a year for three years on a contact with Wombat Security Technologies to educate staff and students about cyber security.