EasyEquities issues warning after third-party cyber incident

EasyEquities customers have been warned about a possible data breach after a third-party service provider reported a cybersecurity incident that may have affected customer information.

The online investment platform uses the provider for client verification checks required by financial regulations. In a customer notification reported by MyBroadband, EasyEquities said a forensic investigation was underway to establish what information may have been affected.

EasyEquities also carried out internal security checks and found no evidence that its own systems or those of Purple Group had been compromised.

‘There has also been no impact on customers’ account security or their ability to invest,’ the company said.

The platform has not yet confirmed what customer information may have been exposed. It said it will communicate further once the third-party investigation produces its final findings.

Customers urged to watch for suspicious messages

EasyEquities has advised customers to remain alert to unsolicited emails, calls or messages requesting personal or account information.

The warning comes as other South African financial services companies have reported similar incidents involving third-party providers. Moneyweb reported on Monday that EasyEquities and Satrix had notified customers of a potential compromise of personal information.

Customers should avoid clicking suspicious links or sharing passwords, PINs or one-time passwords with unsolicited contacts while the investigation continues