Rio Tinto, the Anglo-Australian mining giant, has warned its current and former Australian employees that their personal data, including payroll information such as payslips and overpayment letters, may have been stolen by a cybercriminal group.
The data breach, which occurred in January 2023, involved a small number of employees and was linked to an attack on the GoAnywhere managed file transfer (MFT) software offered by US cybersecurity firm Fortra.
The cybercriminal group has threatened to release the data on the dark web while investigations are ongoing.
This incident is one of many recent cybersecurity incidents involving GoAnywhere MFT reported by firms and government institutions globally.
File-sharing software has historically been a target for cybercriminals, with high-profile data breaches occurring in institutions like Morgan Stanley and the Reserve Bank of New Zealand.