Rio Tinto PLC (LSE:RIO) has been subject to a cyber attack with personal data potentially stolen according to a staff memo.
The mining giant's memo said information on former and current staff dating back to January was stolen by a crypto criminal group using managed file transfer software GoAnywhere, according to Reuters.
"Investigations now indicate a possibility that Rio Tinto data may be impacted," it said to staff.
Though none of the information has been released, a yet-to-be-named group had threatened to publish data on the dark web, including staff payslips and payroll information, it explained.
"To date, none of the records described above have been released, and we still do not know if the cybercriminal group holds these records or not."
It comes after Japanese firm Hitachi Energy was hit by a potential data leak from the same GoAnywhere software last week, after a cyber-attack by group ‘CL0P’.
Rio Tinto shares fell 1.3% to 5,250p.