DisclosureLens
GLOBALUnknownRansomwareRansomhouseLow

Sibanye Stillwater Limited

bd_da70cb282adee516 · schema v1 · pii pii-v1

Severity

Low

Discovered

Filed

Jul 10, 2024

To disclose

Affected

Not disclosed

Linked

2 filings

Confidence

60%
Full breach record for Sibanye Stillwater Limited

Press / market disclosure — not a breach-notification filing

A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage — verify against the source.

Sibanye Stillwater hit by ransomware attack. Sibanye Stillwater: The mining company Sibanye Stillwater was the victim of a ransomware cyberattack that disrupted operations at some of its Montana mining sites. Computer systems were taken offline, but some have begun to be restored. The Columbus plant, which employs several hundred people, was particularly affected, but workers remained on site. Linked ransomware group: ransomhouse.

Incident timeline — mostly unverified

? — ?

Breach window unknown

Jul 10, 2024

Press report

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Attack → press

Compliance clock

Not assessable

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market reportThis record

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source ceiling

  • incident type + narrative only (may be machine-translated)
  • discovery date
  • materiality
  • affected count
  • data types
  • compliance clock

The ✕ fields stay blank until a regulatory filing or victim disclosure lands.

About this groupFirst seen 2021-06-01

ransomhouse

According to ransomware.live, RansomHouse is a double-extortion RaaS operation active since late 2021, attributed to the threat actor "Jolly Scorpius," targeting over 120 organizations across healthcare, finance, transportation, and government, recently upgrading to a multi-layered dual-key encryption architecture.

212 tracked hereFull profile →