Metals & Mining

June 26, 2026

Bloomfield, Connecticut-based Aerospace Alloys Inc. (AAI) suffered a cyberattack in June where personally identifiable information ended up stolen in the hack.
“On or about July 9, 2026, AAI identified unauthorized activity within its network,” said a noticed to victims of the attack. “Once identified, they quickly took steps to isolate and secure the network and engaged third-party specialists to assist with containing and investigating the activity.”
The investigation found the breach started June 26 and ended up discovered July 9. Additionally, certain data within the network ended up potentially copied without authorization. As a result, AAI subsequently began reviewing the data to determine the contents of the data and to whom it related.

February 23, 2026

Birmingham, Alabama-based coal mining processor, Drummond Company, Inc., suffered a cyberattack in February where personally identifiable information ended up stolen in a business email compromise.
“On February 23, 2026, we determined an unauthorized third party had gained access to the email account of a Drummond employee,” the company said in a notice to victims. “We immediately engaged outside cybersecurity experts to investigate.”
As part of its investigation, Drummond determined files within the employee’s email account may have ended up stolen by the unauthorized access. The company conducted an in-depth review of the email account to understand what information the threat actors may have stolen. Drummond just learned that some of these files include personal identifying information.

November 19, 2025

Glassboro, New Jersey-based metal stamping manufacturer, Elray Manufacturing Company suffered a cyberattack in November and is now letting victims know their personally identifiable information ended up stolen in the hack.
“On November 19, 2025, Elray became aware of unusual activity within our computer network and immediately took steps to secure our systems, engaging external cybersecurity experts in the process,” the company said in a letter to victims.. “As a result of that investigation, we learned that an unknown actor gained access to our network and may have acquired certain files.”
Based on Elray’s review, the company said victims’ personal information was on the network and involved in this incident.

June 15, 2024

The Sibanye-Stillwater group, part of Stillwater Mining Company, stated a cyber-attack had compromised certain Sibanye-Stillwater information and communications technology (ICT) systems within their global network. “Upon discovery, we initiated the Incident Response plan .. and engaged external cybersecurity experts and forensic firms to help investigate the suspicious activity. The forensic investigation identified indications of unauthorized activity on certain U.S. systems as of mid-June 2024. Impacted past and current employees were notified their employee files were accessed.

The files contain records of personal information, such as: names; contact details; government ID and/or passport number; Social Security number; tax ID number; date of birth certificate; financial information, such as a bank account number (but no passcodes or PINs); and medical information, such as a health plan number.