Fresnillo disclosed unauthorised access to IT systems and data

Fresnillo plc, the world's largest primary silver producer and Mexico's leading gold producer, told investors that it had been the subject of a cyber security incident resulting in unauthorised access to certain IT systems and data. The disclosure was made on 30 July 2024 through regulatory filings to the London Stock Exchange and the Mexican Stock Exchange, where the company trades as FRES.

The company said it had activated its response protocols on discovering the intrusion, and that its internal IT specialists were working with external forensic experts to investigate the incident and assess its impact.

Fresnillo stated that all business units were continuing their activities and that no material operational or financial impact had been experienced or was foreseen. Its seven producing Mexican mines are Fresnillo, Saucito, Juanicipio, Cienega, Herradura, Noche Buena and San Julian. Coverage of the incident listed Soledad Dipolos as an eighth operation, but mining there was suspended in 2013 after Penmont vacated 1,824 hectares of surface land under a court order.

"Fresnillo plc takes the issue of cyber security extremely seriously and will continue to fully investigate this incident and take all appropriate measures," the company said in its filing. It did not identify the attacker, describe what data had been reached, or say whether employee, contractor or counterparty information was involved. No group publicly claimed the intrusion at the time, and the investigation remained open as of the reporting date.