Gmg Mining Supplies listed by the sarcoma ransomware group

Overview

In August 2024, GMG Mining Machines and Supplies, a South African company specialising in trackless mobile machinery for opencast and underground mining, was listed by the Sarcoma ransomware group. The group posted the company's name and description on its leak site, indicating a successful intrusion.

What was published

The Sarcoma listing for GMG did not include a record count or a list of stolen files. Sarcoma has published victim data in previous incidents, but no archive associated with GMG was observed during the analysis window. The company profile on the leak page described its machinery rental and parts supply services.

Risks for affected individuals

GMG employees and its clients in the mining sector could be exposed if personnel data, project documents or commercial agreements were stolen. Mining companies that share technical and operational information with GMG may face risks if those documents were part of the exfiltration.

What remains unknown

The volume of data taken, the specific records involved, and whether the group published anything after the listing are not confirmed. No public statement from GMG or independent coverage of the incident has been identified.

What affected people should do

Clients and suppliers of GMG should confirm the status of shared documentation with the company, reset credentials for any joint systems, and watch for targeted phishing that references mining operations or project details.