This is our daily post that is shared across Twitter & Telegram and published first on here with Kindness & Love XX on peace-truth.com/

#AceNewsRoom in Kindness & Wisdom provides News & Views @acebreakingnews

#AceBreakingNews – Personal data of Rio Tinto Ltd’s former and current employees may have been stolen by a cybercriminal group, according to a staff memo: Posted 2h ago, updated 2h ago

Payroll information — such as pay slips and overpayment letters — belonging to a small number of employees from January 2023 had possibly been seized by the group, the memo showed.

“Investigations now indicate a possibility that Rio Tinto data may be impacted,” it said.

The cybercriminal group threatened to release the data onto the dark web and investigations into the incident were ongoing, the mining giant added.

“To date, none of the records described above have been released, and we still do not know if the cybercriminal group holds these records or not,” the memo said. 

The stolen data relates to an attack on GoAnywhere — a managed file transfer software offered by cybersecurity firm Fortra — which also provides its services to Rio.

As GoAnywhere is a cloud-based vendor, there is no operational impact or risk to the Rio Tinto network, the memo said.

A host of global firms and government institutions have reported cybersecurity incidents linked to GoAnywhere over the past few weeks.

Hitachi Energy said last week that a ransomware attack by the CL0P group on GoAnywhere could have resulted in unauthorised access to employee data in some countries.

Last month, Community Health Systems — in a US exchange filing — confirmed that the personal and medical information of about 1 million individuals may have been impacted due to a security breach experienced by Fortra.

Fortra did not immediately respond to a request for comment………….File-sharing software has historically been a target for cybercriminals.

Back in 2021, vulnerabilities in the servers of California-based Accellion were exploited by the CL0P group, leading to data breaches in Morgan Stanley, Kroger Co, the Reserve Bank of New Zealand as well as other high-profile institutions.

Rio Tinto has not said who is responsible for the latest cyber attacks.

Editor says …Sterling Publishing & Media Service Agency is not responsible for the content of external site or from any reports, posts or links, and can also be found here on Telegram: https://t.me/acenewsdaily and thanks for following as always appreciate every like, reblog or retweet and comment thank you