Breach taxonomy
Summary
On February 14, 2025, NioCorp Developments became aware of unauthorized third-party access to its information systems, including portions of its email systems. The attack resulted in misdirected vendor payments totaling approximately $0.5 million. The company self-discovered the incident, notified financial institutions and federal law enforcement, and began investigation and remediation steps. Filed under Item 8.01; materiality not yet determined as of filing date.
Tagging rationale
ThreatUnknown
Filing does not attribute the incident to a specific actor type → UNKNOWN.
MethodsAccount Takeover
Filing describes unauthorized third-party access to email systems that led to misdirected vendor payments, consistent with business email compromise and account takeover.