MN nonprofit leader sentenced to 41 years in prison for pandemic fraud case – USA Today

A judge on Thursday, May 21, sentenced the leader of a Minnesota nonprofit organization to more than four decades in prison in a nearly $250 million COVID-19 pandemic relief fraud scheme that exploited a federal child nutrition program.

Aimee Bock, one of 70 people charged in the case, was convicted for her role by a jury in March 2025 alongside her co-defendant, former restaurant owner Salim Ahmed Said.

Bock was the founder and executive director of Feeding Our Future, whose employees recruited restaurant owners and others to open food distribution sites across the state of Minnesota during the pandemic.

“These sites, created and operated by Bock,…

CLICK HERE to read the FULL MN nonprofit leader sentenced to 41 years in prison for pandemic fraud case – USA Today article.

IT & DATA SECURITY (MITIGATING THE “INSIDER THREAT”)

As seen in the TD Bank case, an employee with too much “access” can sell your customer data to syndicates.

• Principle of Least Privilege (PoLP): Employees should only have access to the specific folders and databases required for their current task.
• Access Revocation: Have a “Termination Checklist” that ensures all digital access (Email, VPN, Banking) is revoked within 60 minutes of an employee resigning or being dismissed.
• System Logs & Audit Trails: Enable “Read/Write Logging” on your server. If a customer’s data is leaked, you need to know exactly which login accessed that record and at what time.
• Encryption at Rest: Ensure that sensitive files (like your customer ID numbers or payroll spreadsheets) are encrypted so that if a staff member copies them to a USB, they cannot be read.