Rio Tinto data vendor GoAnywhere's possible breach spotted in Jan-end

FILE PHOTO: A Rio Tinto logo is seen on a helmet in an office at Oyu Tolgoi copper mine in the Gobi Desert, Mongolia March 13, 2023. REUTERS/B. Rentsendorj/File Photo

(Reuters) - U.S. cybersecurity firm Fortra said suspicious activity was identified within its GoAnywhere software nearly two months ago, a day after Rio Tinto in a staff memo said personal data of some of its Australian employees may have been stolen.

The internal memo seen by Reuters on Thursday revealed payroll information, like payslips and overpayment letters, of a small number of the mining giants' Australian employees from January 2023 had possibly been seized by a cybercriminal group.