Menu
Browse

Cyber Incident Victim: Fresnillo PLC

Date:

Jul 2024

Location:

Mexico

Summary

The world’s largest silver producer experienced unauthorized access to certain IT systems and data during a cybersecurity incident. The company initiated containment measures and is investigating with external specialists, reporting no operational disruptions or material financial impact. All business units continue normal activities across its mining operations and exploration projects in multiple countries.

CIA Posture Motives Tactics, Techniques & Procedures
Available to members 3 motives 4 techniques
Threat Actor Type Location
1 actor Available to members Available to members

Description

Fresnillo PLC, the world's largest silver producer and a major global producer of gold, copper, and zinc, disclosed a cybersecurity incident in a Tuesday regulatory filing. The company confirmed unauthorized actors gained access to certain IT systems and data during the attack. Upon detecting the breach, Fresnillo immediately activated response protocols to contain the intrusion. Internal IT teams collaborated with external forensic specialists to investigate the incident's scope and assess its impacts. The company emphasized that its mining operations across eight Mexican facilities—Fresnillo, Saucito, Juanicipio, Ciénega, Herradura, Soledad-Dipolos1, Noche Buena, and San Julián—remained unaffected throughout the event. Advanced exploration projects at Orisyvo, Rodeo, Guanajuato, and Tajitos similarly continued without disruption. Fresnillo stated no material operational or financial consequences had been experienced at the time of disclosure, nor were any foreseen based on preliminary findings.

Cyber Incident Image

The organization reiterated its commitment to ongoing investigation through internal and external resources until full resolution. While the specific nature of compromised data wasn't detailed, Fresnillo confirmed the incident involved unauthorized access to stored system data. Business units maintained normal activities across all operational and exploration sites in Mexico, Peru, and Chile during and after the incident. The company's London Stock Exchange (FRES:LSE) and Mexican Stock Exchange (FRES:BMV) listings remained unaffected. Fresnillo declined to provide additional commentary when contacted by media outlets following the disclosure. Security analysts noted the incident followed recent cyberattacks against other mining firms, though no threat actor claimed responsibility for the Fresnillo breach at the time of reporting. The company continues monitoring for potential delayed impacts while maintaining standard operations across its global assets.

Sources
Sources available to members
1 source