Databreach at Stillwater Mining Company
The Sibanye-Stillwater group, part of Stillwater Mining Company, stated a cyber-attack had compromised certain Sibanye-Stillwater information and communications technology (ICT) systems within their global network. "Upon discovery, we initiated the Incident Response plan .. and engaged external cybersecurity experts and forensic firms to help investigate the suspicious activity. The forensic investigation identified indications of unauthorized activity on certain U.S. systems as of mid-June 2024. Impacted past and current employees were notified their employee files were accessed.
The files contain records of personal information, such as: names; contact details; government ID and/or passport number; Social Security number; tax ID number; date of birth certificate; financial information, such as a bank account number (but no passcodes or PINs); and medical information, such as a health plan number.