Fulcrumsec Claims 2.2 TB Analog Gold Breach Involving Guyana Mining Records
Summary
Fulcrumsec claims it exfiltrated 2.2 TB from Analog Gold and Prospector Portal, including Guyana mining records, and is using a 58 GB highlights package to extort the company. The reported breach and exposed data are unverified.
Key points
- Fulcrumsec claims the alleged breach affected Analog Gold and subsidiary Prospector Portal, spanning 52 S3 buckets and 2.2 TB of data.
- The article attributes to the group claims that the data included personal information and 12,987 Guyana mineral-license records with GPS polygons.
- The group reportedly claims the haul also included NI 43-101 mining reports, database dumps, machine-learning assets, and source code.
- Cleartext AWS, Snowflake, Auth0, and database credentials are among the data the article says Fulcrumsec claims to have obtained.
- The article says Fulcrumsec is using a 58 GB highlights package to extort Analog Gold amid a pending $28 million asset sale to Exter Gold Corp.
- The alleged access, exfiltration, and data contents are attributed claims; the article provides no independent confirmation.
Article Details
- Victim
- Analog Gold; the article also names its Prospector Portal subsidiary.
- Encryption Status
- Not disclosed.
- Exfiltration Status
- Fulcrumsec claims data was exfiltrated; the claim is not independently confirmed in the supplied content.
- Exfiltrated Data
- Fulcrumsec alleges the data includes personal information, government mining records, proprietary reports, database dumps, machine-learning assets, source code, and credentials.
- Exfiltrated Size
- 2.2 TB claimed by Fulcrumsec across 52 S3 buckets.
- Ransom Demand
- Not disclosed; the article says the group is using a 58 GB “highlights package” to extort the company but gives no demand amount.
- Leak Status
- Fulcrumsec reportedly used a 58 GB “highlights package” to extort Analog Gold. Whether it was publicly leaked or its contents verified is not stated.
Threat Actors
Vendors
Products
Auth0#FulcrumsecAWS S3Fulcrumsec claims a 2.2 TB breach spanning 52 AWS S3 buckets due to infrastructure misconfigurations.GGMC IMAPSexfiltrating 2.2 TB of data across 52 S3 buckets that allegedly include the Republic of Guyana’s GGMC IMAPS sovereign mining database.Prospector PortalThe Fulcrumsec group claims to have breached Analog Gold and its Prospector Portal subsidiary, exfiltrating 2.2 TB of data across 52 S3 buckets that allegedly include the Republic of Guyana’s GGMC IMAPS sovereign miningSageMaker#FulcrumsecSnowflakeidentifiers and proprietary NI 43-101 reports to ML models, database dumps, and cleartext AWS and Snowflake credentials.
Countries
Guyanasubsidiary, exfiltrating 2.2 TB of data across 52 S3 buckets that allegedly include the Republic of Guyana’s GGMC IMAPS sovereign mining database.United StatesThe Fulcrumsec group claims to have breached Analog Gold and its subsidiary, Prospector Portal, a US-based AI mining intelligence platform.