Cyber Incident Victim: Fresnillo PLC
Date:
Jul 2024
Location:
Mexico
Summary
The world’s largest silver producer experienced unauthorized access to certain IT systems and data during a cybersecurity incident. The company initiated containment measures and is investigating with external specialists, reporting no operational disruptions or material financial impact. All business units continue normal activities across its mining operations and exploration projects in multiple countries.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 3 motives | 4 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
Fresnillo PLC, the world's largest silver producer and a major global producer of gold, copper, and zinc, disclosed a cybersecurity incident in a Tuesday regulatory filing. The company confirmed unauthorized actors gained access to certain IT systems and data during the attack. Upon detecting the breach, Fresnillo immediately activated response protocols to contain the intrusion. Internal IT teams collaborated with external forensic specialists to investigate the incident's scope and assess its impacts. The company emphasized that its mining operations across eight Mexican facilities—Fresnillo, Saucito, Juanicipio, Ciénega, Herradura, Soledad-Dipolos1, Noche Buena, and San Julián—remained unaffected throughout the event. Advanced exploration projects at Orisyvo, Rodeo, Guanajuato, and Tajitos similarly continued without disruption. Fresnillo stated no material operational or financial consequences had been experienced at the time of disclosure, nor were any foreseen based on preliminary findings.

The organization reiterated its commitment to ongoing investigation through internal and external resources until full resolution. While the specific nature of compromised data wasn't detailed, Fresnillo confirmed the incident involved unauthorized access to stored system data. Business units maintained normal activities across all operational and exploration sites in Mexico, Peru, and Chile during and after the incident. The company's London Stock Exchange (FRES:LSE) and Mexican Stock Exchange (FRES:BMV) listings remained unaffected. Fresnillo declined to provide additional commentary when contacted by media outlets following the disclosure. Security analysts noted the incident followed recent cyberattacks against other mining firms, though no threat actor claimed responsibility for the Fresnillo breach at the time of reporting. The company continues monitoring for potential delayed impacts while maintaining standard operations across its global assets.
