DBHunter
Infinity Member
Golden Member
- Joined
- August 23, 2025
- Messages
- 2,064
- Reaction score
- 3,867
- Points
- 113
- Thread Author
- #1
ANALOG GOLD INC: THE MINING COMPANY THAT LOST A COUNTRY
52 S3 buckets. 2.2 terabytes. 3.3 million files. The complete infrastructure of Prospector Portal -- an AI mining intelligence platform -- and the sovereign government database of the Republic of Guyana.
Prospector Portal is a subsidiary of Analog Gold Inc., founded by Emily King -- former Pentagon director of natural resources, American Mining Hall of Fame Medal of Merit recipient, and current CEO of Global Venture Consulting, which holds a multi-year contract with Guyana's Ministry of Natural Resources to build a national mineral inventory. King simultaneously serves as CEO of Prospector, Chief Innovation Officer and Director of Analog Gold (currently in a $28M asset sale to Exter Gold Corp. -- we'll see how that pans out after this), and holds board seats at VVC Exploration (TSX-V: VVC) and Welsbach Technology Metals Acquisition Corp. (NASDAQ: WTMAU).
The company decided our reasonable fee was too great a price to pay. Sadly, they're now going to find out the true price of the breach, and it is going to be vastly more than we asked for.
The below is the complete accounting of all the data Analog Gold's negligence allowed to slip out the door unnoticed.
---
WHAT'S IN THE DATA, ALL 2.2+ TERABYTES OF IT
1. THE CITIZENS OF GUYANA -- 12,532 People (27 files in highlights)
The Guyana Geology and Mines Commission (GGMC) administers every mining permit in the country through a system called IMAPS. The complete IMAPS database was stored in Prospector Portal's commercial US-based AWS account -- not on government infrastructure, not in a government-controlled tenancy, but in the same account as a startup's staging logs and ML training data.
The client table contains 12,579 records. Eleven are obvious test entries. The remaining 12,532 are Guyanese citizens and mining companies, each with:
Sample records (6 of 12,532):
Alexandra Turner| TIN 169506334| NIN 135153413 | 226-9492 | Kitty, Station St #45 | 1992-11-12
Alyssa Flores | TIN 167231810 | NIN 142524219 | -- | Baramita Village | 1970-10-17
Jermaine Sai | TIN 118074496 | NIN 106248649 | 676-7008 | Calcutta, Mahaicony | 1974-11-08
Cameron Brown | TIN 185016163 | NIN 173470816 | 688-2894 | Timehri, Reid's Ave #48 | 1982-08-06
Winston George | TIN 154883878 | NIN 154883878 | 6814120 | Georgetown, Henry Ave #11 | 1996-03-08
Kevin Chin (CEO, Kairos Hotel) | TIN 1452865 | NIN 1748596 | 231 4875 | Georgetown
All of this was sitting in a Fort Lauderdale startup's S3 buckets.
2. THE COMMERCIAL MINING INTELLIGENCE PLATFORM -- ~1.5 TB+
Prospector Portal's entire product -- the mining data platform that FactSet and TMX Datalinx resell to institutional clients -- was exfiltrated in full:
Complete database dumps:
Daily production snapshots: 678 daily MySQL dumps of the companies table -- 4,741 mining companies with full contact détails, market caps, exchange data -- one snapshot per day from April 2023 onward. The complete historical evolution of every company in the Prospector database.
Daily data migrations: CSV exports from October 2021 onward: projects, companies, mineral reserves, production figures, life-of-mine plans, project owners, NI 43-101 report metadata. Every data point in the Prospector product, exported daily for over two years.
FactSet data pipeline: Daily FactSet-specific exports from April 2023 onward. Each export contains: minerals, company annual/quarterly productions, Corporate KPI Pivot, annotations, projects, companies, project owners, NI 43-101 reports (76 MB per export), mineral reserves/resources (93 MB per export), LOMP mining statistics. The complete pipeline feeding the "FactSet Metals & Mining Industry -- Global Mining Bundle" that launched on FactSet Marketplace in August 2025.
FactSet financial analytics: Thousands of SQL INSERT files containing fundamental financial data for thousands of mining companies: assets, CAPEX, cash positions, company descriptions, enterprise values, EPS, net income, EBITDA, current ratios, shareholder equity. The proprietary analytics database.
3. PROPRIETARY NI 43-101 TECHNICAL REPORTS -- ~21 GB
These are the reports that mining investors pay $75–$150/month to search. Pre-publication access to resource estimates has material value for trading ahead of announcements.
4. SECURITIES FILINGS -- ~26 GB
5. HISTORICAL GUYANA GEOLOGICAL ARCHIVES
Irreplaceable national patrimony dating back to the 1920s:
These are the geological memory of a nation, digitised and then stored with the security posture of a developer's side project.
6. MACHINE LEARNING & AI
The complete AI behind Prospector Portal:
7. CREDENTIALS & INFRASTRUCTURE
8. APPLICATION LOGS & CI/CD
WHY ANALOG GOLD IS GOING TO HAVE A VERY BAD TIME
1. Data sovereignty violation. The sovereign government database for an entire nation's mining administration system was stored in a US-based commercial AWS account belonging to a SaaS startup. 12,532 Guyanese citizens' Tax Identification Numbers and passport numbers were sitting next to staging logs and ML training data.
2. Unreleased government land planning. The proposed Amerindian land extensions -- 3.6 million acres of indigenous territory expansion plans -- are unreleased government planning data. Their publication has implications for indigenous rights, land disputes, and mining industry planning in Guyana.
3. Active M&A exposure. Analog Gold is in the middle of a $28 million asset sale to Exter Gold Corp. The binding LOI was signed in December. CSE approval is pending.
4. FactSet/TMX Datalinx partnership compromise. The entire Prospector product database was built on licensed FactSet and TMX Datalinx data feeds. Full exposure terminates those partnerships.
5. Stock manipulation potential. The NI 43-101 reports contain pre-publication mineral resource estimates for mining projects globally. Pre-publication access to resource estimates has material value for trading ahead of public announcements.
6. Named government officials. Nine GGMC officials are identified by name across thousands of permit approval/rejection decisions, exposing decision patterns and enabling targeted social engineering.
THE HIGHLIGHTS PACKAGE (DOWNLOAD NOW)
Given the overwhelming volume -- over 2.2 terabytes -- we are releasing a ~60 GB highlights package containing 5,293 of the most sensitive files. This is an archive containing 58gb made up of 5,293 files selected from the categories above. The full 2.2+ TB dataset -- daily snapshots, FactSet pipeline, ML models, application logs, and everything else -- will be released in due course.
Download here:
This includes the following:
1. GGMC Citizen Database (27 files)
2. Credentials (8 files)
3. NI 43-101 Reports (~1,886 PDFs): Full technical report library + parsed metadata CSV
4. Database Dumps (7 files)
5. Historical Guyana Archives (46 files): Demerara Bauxite drill logs, Reynolds Metal exploration, 1936 mine plans, 1920 petroleum reports, geological survey maps
6. Source Code & ML (5 files): Django backend, ML training texts, GPT-4 drill summaries
7. Regulatory Filings & DocDB (~4,200 files)
---
To Emily King and the Analog Gold Leadership:
We'd wager there is a non-zero chance your business will not survive this. If you want to save Analog Gold and Prospector, do the smart thing, and contact us. We'll bring this post down and take the data offline, and the full 2+ terabytes will never go up. We're not holding our breath, but we'd still prefer to go this route rather than see your company die under the weight of lawsuits, your likely expulsion from Guyana, and the impending loss of the $28 million when Exter Gold Corp. pulls their offer due to the staggering lack of security and outright negligence you have demonstrated -- with the critical personal data of another country's sovereign citizens, no less.
52 S3 buckets. 2.2 terabytes. 3.3 million files. The complete infrastructure of Prospector Portal -- an AI mining intelligence platform -- and the sovereign government database of the Republic of Guyana.
Prospector Portal is a subsidiary of Analog Gold Inc., founded by Emily King -- former Pentagon director of natural resources, American Mining Hall of Fame Medal of Merit recipient, and current CEO of Global Venture Consulting, which holds a multi-year contract with Guyana's Ministry of Natural Resources to build a national mineral inventory. King simultaneously serves as CEO of Prospector, Chief Innovation Officer and Director of Analog Gold (currently in a $28M asset sale to Exter Gold Corp. -- we'll see how that pans out after this), and holds board seats at VVC Exploration (TSX-V: VVC) and Welsbach Technology Metals Acquisition Corp. (NASDAQ: WTMAU).
The company decided our reasonable fee was too great a price to pay. Sadly, they're now going to find out the true price of the breach, and it is going to be vastly more than we asked for.
The below is the complete accounting of all the data Analog Gold's negligence allowed to slip out the door unnoticed.
---
WHAT'S IN THE DATA, ALL 2.2+ TERABYTES OF IT
1. THE CITIZENS OF GUYANA -- 12,532 People (27 files in highlights)
The Guyana Geology and Mines Commission (GGMC) administers every mining permit in the country through a system called IMAPS. The complete IMAPS database was stored in Prospector Portal's commercial US-based AWS account -- not on government infrastructure, not in a government-controlled tenancy, but in the same account as a startup's staging logs and ML training data.
The client table contains 12,579 records. Eleven are obvious test entries. The remaining 12,532 are Guyanese citizens and mining companies, each with:
- Full name
- Tax Identification Number (TIN)
- National Identification Number (NIN)
- Passport number
- Date of birth
- Phone number(s)
- Email address
- Full physical address (city, street, house number)
- Gender, nationality, country of birth
- Company directorship information (for businesses)
- Banned/deceased status flags
Sample records (6 of 12,532):
Alexandra Turner| TIN 169506334| NIN 135153413 | 226-9492 | Kitty, Station St #45 | 1992-11-12
Alyssa Flores | TIN 167231810 | NIN 142524219 | -- | Baramita Village | 1970-10-17
Jermaine Sai | TIN 118074496 | NIN 106248649 | 676-7008 | Calcutta, Mahaicony | 1974-11-08
Cameron Brown | TIN 185016163 | NIN 173470816 | 688-2894 | Timehri, Reid's Ave #48 | 1982-08-06
Winston George | TIN 154883878 | NIN 154883878 | 6814120 | Georgetown, Henry Ave #11 | 1996-03-08
Kevin Chin (CEO, Kairos Hotel) | TIN 1452865 | NIN 1748596 | 231 4875 | Georgetown
- The MSSQL backup (MineralPropertyProd.bak) adds another layer: 12,987 mineral licence records with named applicants and precise GPS polygon coordinates for every active, pending, cancelled, and converted mining claim in the country. Plus 9,476 cancelled mineral property records, 2,172 converted prospecting permits, 992 special mining permits, and 38 quarry licences -- all with named individuals.
- The permit décision tables expose the names and patterns of GGMC officials across thousands of approvals and rejections: Terry Moore, Shevon Duguid, Tamara Gilhuys, Donald Singh, Eton Chestor, Fay Prescott. In a small country where a mining permit can make a family's fortune, the complete decision history of named civil servants is not an abstract concern.
- The geodata exports complete the picture: 14,367 mineral licence GPS polygons covering every claim in Guyana, all 7 mining district boundaries, 69 government reserved areas, 250 Amerindian indigenous land titles with grant numbers, and -- most sensitive of all -- 41 proposed Amerindian land extensions totalling over 3.6 million acres of unreleased government planning data: Aishalton (1,089,820 acres), Parabara (958,026 acres), Monkey Mountain (195,552 acres), and dozens more. Overlay the proposed indigenous extensions with the active mineral licence polygons and you can see exactly which mining claims fall within proposed Amerindian territory.
- The Snowflake CREATE TABLE schemas for GUYANA.IMAPS and GUYANA.MINERAL_PROPERTY_PROD databases are included, along with the RSA private key for Snowflake JWT authentication and the connection scripts showing the USERS and APPLICATIONS table schemas.
All of this was sitting in a Fort Lauderdale startup's S3 buckets.
2. THE COMMERCIAL MINING INTELLIGENCE PLATFORM -- ~1.5 TB+
Prospector Portal's entire product -- the mining data platform that FactSet and TMX Datalinx resell to institutional clients -- was exfiltrated in full:
Complete database dumps:
- watchtower-2022-10-05.sql (898 MB) -- Complete MySQL dump: 4,741 mining companies with contact details, market caps, exchange listings; 660,000+ document records; hundreds of thousands of mineral resource estimates
- watchtower-2022-10-06.sql (1.2 GB) -- Second complete dump
- documents_export_2022-08-26_133809.sql (1.05 GB) -- 660K+ proprietary FactSet/NorthernLight document records
- imaps_no_owners.sql (1.33 GB) -- Complete GGMC IMAPS PostgreSQL with PostGIS spatial data
- MineralPropertyProd.bak (1.23 GB) -- MSSQL legacy mineral property database
- projects_list.csv (5.7 MB) -- 10,221 mining projects with GPS coordinates, mineral types, development stages
- filings.csv (435 KB) -- FactSet filing metadata
Daily production snapshots: 678 daily MySQL dumps of the companies table -- 4,741 mining companies with full contact détails, market caps, exchange data -- one snapshot per day from April 2023 onward. The complete historical evolution of every company in the Prospector database.
Daily data migrations: CSV exports from October 2021 onward: projects, companies, mineral reserves, production figures, life-of-mine plans, project owners, NI 43-101 report metadata. Every data point in the Prospector product, exported daily for over two years.
FactSet data pipeline: Daily FactSet-specific exports from April 2023 onward. Each export contains: minerals, company annual/quarterly productions, Corporate KPI Pivot, annotations, projects, companies, project owners, NI 43-101 reports (76 MB per export), mineral reserves/resources (93 MB per export), LOMP mining statistics. The complete pipeline feeding the "FactSet Metals & Mining Industry -- Global Mining Bundle" that launched on FactSet Marketplace in August 2025.
FactSet financial analytics: Thousands of SQL INSERT files containing fundamental financial data for thousands of mining companies: assets, CAPEX, cash positions, company descriptions, enterprise values, EPS, net income, EBITDA, current ratios, shareholder equity. The proprietary analytics database.
3. PROPRIETARY NI 43-101 TECHNICAL REPORTS -- ~21 GB
- 1,886+ NI 43-101 technical mining report PDFs -- the commercial core of Prospector's subscription product. Pre-publication mineral resource estimates, feasibility studies, and geological data for mining projects globally, sourced from FactSet and TMX Datalinx feeds. Includes a 30 MB metadata CSV with section-by-section parsed data for every report.
These are the reports that mining investors pay $75–$150/month to search. Pre-publication access to resource estimates has material value for trading ahead of announcements.
4. SECURITIES FILINGS -- ~26 GB
- 11,202 SEDAR URL documents (~17.4 GB) -- additional Canadian securities filings
- 1,994 SEDAR documents (~4.3 GB) -- Canadian securities regulatory filings
- 901 ASX documents (~3.8 GB) -- Australian Stock Exchange filings
- 665 SEC/EDGAR filings (~283 MB)
- 55,695 FactSet filing records in DocumentDB backup (660 MB compressed), plus ML scoring logs, scraped Twitter data from mining company accounts (yukoncopper, xplorecorp, WhiteRock_WRM, universalcopper, TreasuryMetals, SurgeCopper, and dozens more), document confidence scores, FactSet entity IDs
5. HISTORICAL GUYANA GEOLOGICAL ARCHIVES
Irreplaceable national patrimony dating back to the 1920s:
- Demerara Bauxite Company drill hole logs from the 1950s–60s
- Reynolds Metal Company exploration records from Orealla, Tarakul, Canje, and Kari Kari (1958–1963)
- Mine plans from 1936 (The Dickman Hill Mine Plan by J.V. Loncke)
- Reports on petroleum exploration in British Guiana (1920, by J.A. Bullbrook)
- S. Whyte geological survey maps (400–470 MB TIF files each)
- Linden Mining Enterprise geotechnical reports
- Reconnaissance surveys across granite terrains (1981)
These are the geological memory of a nation, digitised and then stored with the security posture of a developer's side project.
6. MACHINE LEARNING & AI
The complete AI behind Prospector Portal:
- Production models: 12 specialised SageMaker models -- page classification, author extraction, mineral resource extraction , geographic entity extraction minerals counting, project stage classification, summary generation.
- Training data , (partial in highlights): texts.csv, texts_short2.csv, texts_short3.csv, texts_short4.csv -- extracted text from proprietary NI 43-101 reports used for model training.
- Studio models: Six copies of PyTorch model weights, FastAI learners, ArXiv training data , SageMaker Ground Truth manifest.
- Page classification training sets : PNG page images used to train document classification.
- GPT-4 drill result summaries (in highlights): LLM-generated analysis for Dreadnought Resources (Mangaroon Project) and International Lithium Corp (Raleigh Lake).
- Django backend (in highlights): dev_prospector-djan_current_project.tar.gz -- the complete backend source code.
7. CREDENTIALS & INFRASTRUCTURE
- Complete .env file (4,848 bytes) with AWS access keys: AKIAXM7KV3AVCKMVS6OC:YylP+UuBzJ29++Qa9rOvnpB5LySFK+pV2rlIbYFc, SendGrid API key (email sending as sales@prospectorportal.com), Auth0 client ID and secret, Elasticsearch credentials: elastic:BXdWhLkVHiTIosq78J2R8brF, Stripe secret keys, Algolia secrets, HubSpot API key, Firebase config, Sentry DSN
- MySQL: staging_user / INsofIZeAphI at prospector-staging.cjlty4hjlkfg.us-east-1.rds.amazonaws.com
- RSA private key (rsa_key.p8) for Snowflake JWT authentication -- direct programmatic access to the GUYANA.GGMC data warehouse (Database: GUYANA, Schema: GGMC, Warehouse: COMPUTE_WH).
- Django secret key: 7q7i73_xfct0i33hyewn&a-(r_efaod)k)w_luc!!c2=!tt#i@. MD5 seed: "rien" -- French for "nothing."
- Terraform state files with ECR tokens, ALB configurations, VPC details.
- 7 web application deployments (Production through Beaver Creek demo), all sharing Firebase API key AIzaSyCJWl0sR1BBOwQ_kYh1yKMsNZvMD6FKWb4. Production app exposes Google Maps API key, Google Analytics (G-9SJBB6N7DD), Mapbox integration, and the AI Copilot endpoint at copilot.prospectormatch.com.
- 53 GGMC deployment archives containing complete government portal source code (Next.js, Snowflake, PostGIS, MongoDB, Django REST).
8. APPLICATION LOGS & CI/CD
- staging-logs-upto-2022-12-15.log -- Laravel application logs with HTTP requests, crawler operations scraping mining company websites, error traces
- staging-logs-upto-2023-03-15.log -- additional staging logs
- CI/CD build cache (294 MB), build outputs, Lambda function packages (company-tweet-scraper, DownloadDocumentsLambdaStack, fetchReportImages, fetchReportMetadata, TweetScraperCallerApp)
- MySQL replication binlogs (28 files)
WHY ANALOG GOLD IS GOING TO HAVE A VERY BAD TIME
1. Data sovereignty violation. The sovereign government database for an entire nation's mining administration system was stored in a US-based commercial AWS account belonging to a SaaS startup. 12,532 Guyanese citizens' Tax Identification Numbers and passport numbers were sitting next to staging logs and ML training data.
2. Unreleased government land planning. The proposed Amerindian land extensions -- 3.6 million acres of indigenous territory expansion plans -- are unreleased government planning data. Their publication has implications for indigenous rights, land disputes, and mining industry planning in Guyana.
3. Active M&A exposure. Analog Gold is in the middle of a $28 million asset sale to Exter Gold Corp. The binding LOI was signed in December. CSE approval is pending.
4. FactSet/TMX Datalinx partnership compromise. The entire Prospector product database was built on licensed FactSet and TMX Datalinx data feeds. Full exposure terminates those partnerships.
5. Stock manipulation potential. The NI 43-101 reports contain pre-publication mineral resource estimates for mining projects globally. Pre-publication access to resource estimates has material value for trading ahead of public announcements.
6. Named government officials. Nine GGMC officials are identified by name across thousands of permit approval/rejection decisions, exposing decision patterns and enabling targeted social engineering.
THE HIGHLIGHTS PACKAGE (DOWNLOAD NOW)
Given the overwhelming volume -- over 2.2 terabytes -- we are releasing a ~60 GB highlights package containing 5,293 of the most sensitive files. This is an archive containing 58gb made up of 5,293 files selected from the categories above. The full 2.2+ TB dataset -- daily snapshots, FactSet pipeline, ML models, application logs, and everything else -- will be released in due course.
Download here:
This includes the following:
1. GGMC Citizen Database (27 files)
- 12,532 citizens' PII (TIN, NIN, passport, DOB, address)
- 12,987 mineral licence records with GPS polygons
- 9,476 cancelled properties, 7,134 applications, 2,578 rejections, 2,172 converted permits, 992 special permits
- Geodata: 14,367 licence polygons, 7 mining districts, 250 Amerindian titles, 41 proposed land extensions (3.6M acres)
- Snowflake schemas
2. Credentials (8 files)
- .env with AWS keys, SendGrid, Auth0, Elasticsearch, Stripe, Algolia, HubSpot, Firebase, MySQL creds
- RSA private key for Snowflake JWT
- Snowflake query scripts, Terraform state, Django secret key
3. NI 43-101 Reports (~1,886 PDFs): Full technical report library + parsed metadata CSV
4. Database Dumps (7 files)
- 2× watchtower MySQL dumps
- documents export
- GGMC IMAPS PostgreSQL
- MineralPropertyProd MSSQL
- projects_list.csv (10,221 projects), filings.csv
5. Historical Guyana Archives (46 files): Demerara Bauxite drill logs, Reynolds Metal exploration, 1936 mine plans, 1920 petroleum reports, geological survey maps
6. Source Code & ML (5 files): Django backend, ML training texts, GPT-4 drill summaries
7. Regulatory Filings & DocDB (~4,200 files)
- 1,994 SEDAR, 901 ASX, 665 SEC/EDGAR PDFs
- 292 DocDB backup files
- 55,695 FactSet filing records, Twitter scrapes, ML logs
---
To Emily King and the Analog Gold Leadership:
We'd wager there is a non-zero chance your business will not survive this. If you want to save Analog Gold and Prospector, do the smart thing, and contact us. We'll bring this post down and take the data offline, and the full 2+ terabytes will never go up. We're not holding our breath, but we'd still prefer to go this route rather than see your company die under the weight of lawsuits, your likely expulsion from Guyana, and the impending loss of the $28 million when Exter Gold Corp. pulls their offer due to the staggering lack of security and outright negligence you have demonstrated -- with the critical personal data of another country's sovereign citizens, no less.
