EasyEquities warns clients after third-party security breach - IOL

EasyEquities has warned clients about a potential exposure of personal information following a security incident at a third-party provider.

Online investment platform EasyEquities has announced that some of its clients’ personal information may have been exposed after a third-party service provider suffered a security breach.

The company said the provider, which handles part of its client identification and verification process, confirmed on September 10 that an unauthorised third party had gained access to its environment.

EasyEquities is one of South Africa’s largest online investment platforms and forms part of JSE-listed financial services and technology group Purple Group.

The platform had 2.87 million registered clients and 1.24 million active clients at the end of February 2026, according to Purple Group’s interim results.

“The provider, which we use for part of our client identification and verification process, confirmed to us on the evening of 10 September 2026 that an unauthorised third party had gained access to its environment. We disabled our integration with the provider the next day, 11 September 2026, as an immediate containment step.”

"This affects clients whose information passed through this specific provider, not everyone on the platform. We've already contacted the clients this concerns directly."

It stressed that clients’ accounts, investments and ability to trade have not been affected.

The incident involves a provider used by EasyEquities for part of its identity verification and client identification process.

EasyEquities said the breach did not involve its own trading, custody or account systems.

The company said it is continuing to work with the provider as investigations into the incident continue.

EasyEquities has also engaged independent cybersecurity specialists and is accelerating the rollout of two-factor authentication across the platform.