In April 2026, the Fulcrumsec group claimed responsibility for a data breach impacting Analog Gold and its subsidiary, Prospector Portal, a US-based AI mining intelligence platform. The incident reportedly involved 2.2 terabytes of data across 52 Amazon S3 buckets, including commercial infrastructure details and sovereign government mining data from the Republic of Guyana, specifically the GGMC IMAPS. Fulcrumsec attributed the breach to infrastructure misconfigurations and used a 58 GB "highlights package" for extortion.
The reported exposed data includes full names, Tax Identification Numbers (TIN), National Identification Numbers (NIN), passport numbers, dates of birth, phone numbers, email addresses, full physical addresses, company directorship information, decision history and identities of named GGMC government officials, 12,987 mineral license records with GPS coordinates, and unreleased government planning data. Guyana's Ministry of Natural Resources stated that only publicly available data from Prospector's Amazon S3 buckets was accessed due to a misconfiguration, which has since been remediated. The number of affected individuals and specific U.S. states impacted remain unclear. It has not been publicly confirmed by Analog Gold if any sensitive data was compromised or if the breach extended beyond publicly available information.
Details surrounding this incident, including the full scope and confirmed impact, may emerge over time. Official notices to affected individuals, if applicable, may be delayed.