Sumitomo Metal Mining Reports Ransomware Attack at Philippine Nickel Subsidiary

Summary
Sumitomo Metal Mining says unauthorized third-party access led to two servers being encrypted at its Coral Bay Nickel subsidiary. Production remains unaffected as the company investigates and restores systems.
Key points
- Sumitomo Metal Mining reported that unauthorized third-party access led to two servers being encrypted at its Philippine subsidiary, Coral Bay Nickel Corporation.
- The company isolated the affected servers and is investigating the incident with external specialists while working to restore systems.
- The production plant’s control systems remain intact, and production continues without reported disruption.
- As a precaution, networks at Coral Bay Nickel, Sumitomo Metal Mining Philippine Holdings, and Taganito HPAL Nickel were disconnected.
- The company expects a limited impact on consolidated results for the fiscal year ended March 2026, but its financial assessment is ongoing.
Article Details
- Victim Organization
- Coral Bay Nickel Corporation
- Incident Type
- Ransomware attack following unauthorized third-party access; two servers were encrypted.
- Operational Impact
- Two affected servers were isolated. The networks of Coral Bay Nickel, Sumitomo Metal Mining Philippine Holdings, and Taganito HPAL Nickel were disconnected as a precaution. Production continued, control systems remained intact, and no impact was reported at other group facilities. Investigation and system restoration are ongoing; the company expects a limited impact on consolidated results, pending assessment.
- Ransom Or Extortion
- A ransomware attack was reported, but no ransom demand, extortion activity, or payment was disclosed.
- Claim Status
- confirmed
