Incident

Stillwater Mining Company reports data breach after ransomware attack


Learn More

Stillwater Mining Company, the owner of the only platinum and palladium mines in the United States, reports a data breach following a ransomware attack this summer.

The attack occurred in mid-June and was discovered on July 8, but it took over a month to confirm that personal data had been stolen. The mining company is collaborating with law enforcement and external cybersecurity experts to investigate the incident and hold the attackers accountable.

The RansomHub group leaked the stolen data on August 15. The breach, exposed sensitive information of 7,258 employees, including:

  • Names and contact information,
  • Government ID and passport numbers,
  • Social Security and tax ID numbers,
  • Birth certificates,
  • Financial details such as bank account numbers,
  • Medical information, including health plan numbers.

Stillwater Mining Company has not provided any other details about protection of the affected employees.

Stillwater Mining Company reports data breach after ransomware attack