Nothing to be concerned about and well done by the company to pick this up as quick as they did. Cyber security breaches happen all the time and is one of the biggest issues at the moment, banks and many other companies have been targeted, you just need to google to see how often it happens.
I am sure the company would have Cyber insurance that would be insured against such an incident anyway, and I would say between the insurance and the bank, CAN will be reimbursed. In regards to some of the comments here, the 3rd party's account could have been hacked/compromised for this to occur, so you can't blame CAN for sending the money to an unknown source.
Again, I would like to applaud CAN on taking quick swift action to minimize any further loss.
