Coal Mining Processor, Drummond Company Suffers Cyberattack
Birmingham, Alabama-based coal mining processor, Drummond Company, Inc., suffered a cyberattack in February where personally identifiable information ended up stolen in a business email compromise.
“On February 23, 2026, we determined an unauthorized third party had gained access to the email account of a Drummond employee,” the company said in a notice to victims. “We immediately engaged outside cybersecurity experts to investigate.”
As part of its investigation, Drummond determined files within the employee’s email account may have ended up stolen by the unauthorized access. The company conducted an in-depth review of the email account to understand what information the threat actors may have stolen. Drummond just learned that some of these files include personal identifying information.