Rio Tinto data vendor GoAnywhere’s possible breach spotted in Jan-end

CNA reports:

U.S. cybersecurity firm Fortra said suspicious activity was identified within its GoAnywhere software nearly two months ago, a day after Rio Tinto in a staff memo said personal data of some of its Australian employees may have been stolen.

The internal memo seen by Reuters on Thursday revealed payroll information, like payslips and overpayment letters, of a small number of the mining giants’ Australian employees from January 2023 had possibly been seized by a cybercriminal group.