
Eastern Platinum Limited (Eastplats) suffered a confirmed data breach after an attack compromised its internal IT systems last month.
Eastplats is a platinum group metals (PGM) and chrome producer with assets located along South Africa’s Bushveld Complex, the world’s largest known PGM resource.
According to a company statement cited by Daily Investor, Eastplats discovered the breach on 27 May 2025 and immediately deployed containment measures to limit the impact.
“Eastplats has since been working with cybersecurity experts to thoroughly investigate the incident’s scope and undertake necessary remedial action,” the company stated.
While core business operations remained unaffected, specific files concerning internal affairs were leaked online without authorization.
The company is currently reviewing the leaked files to ensure compliance with legal obligations and protect its commercial interests. Eastplats emphasized that safeguarding its systems and data remains a top priority and that authorities have been notified of the breach.
“Eastplats is committed to maintaining the trust and confidence of its stakeholders,” it said.
Growing Cyber Attacks in South Africa
This breach marks another entry in the growing list of cyberattacks targeting South African companies.
In the last 18 months, high-profile attacks have hit the likes of Cell C, South African Airways, Nampak, Sibanye-Stillwater and Astral Foods.
A decade ago, only 12% of businesses saw cybercrime as a major threat. In 2025, that figure has jumped to 38%, with Africa among the regions most concerned, according to Allianz Risk Barometer 2025.
The report identified cybercrime as the leading global business risk, surpassing concerns like energy supply and political instability.
On top of that, most cybersecurity incidents go unnoticed.
South Africa’s Information Regulator estimates between 150 and 300 cyberattacks occur each month—most of which go unreported due to fears of reputational or legal fallout.