EasyEquities informs customers about possible data breach
EasyEquities has sent customers an email notifying them that one of its third-party service providers may have experienced a data breach or leak which affects them.
“As part of our client verification process, EasyEquities uses a third-party service provider to conduct verification checks in line with regulatory obligations,” the online trading platform said.
“We are writing to inform you that this third-party service provider has experienced a cybersecurity incident potentially affecting customer information.”
EasyEquities said an immediate forensic investigation by the third-party service provider has commenced to determine the nature and extent of the incident and the information that may have been affected.
“We can confirm that we are working closely with the third-party service provider as their investigation continues,” EasyEquities said.
“EasyEquities takes cyber-security threats seriously and upon receiving notification of the cyber security incident, we have conducted our own internal security checks across all entities.”
It said its internal investigation found no evidence that any EasyEquities or Purple Group systems were compromised.
There has also been no impact on customers’ account security or their ability to invest. EasyEquities said it had not yet received the final findings of the third-party investigation.
“Once we receive a final investigative report from the third-party service provider, we will provide further communication if necessary or required,” it said.
The notification from EasyEquities follows Bidvest Bank’s very similar notification to its customers about a cyber incident at a third-party service provider.
It did not reveal what data was potentially exposed or which provider was breached, saying only that it held “limited categories” of Bidvest Bank data.
“The service provider has confirmed that Bidvest Bank data was held in the affected environment and should be treated as potentially affected,” it stated.
“The extent of any access to that data has not yet been established, and an independent forensic investigation is continuing.”
Bidvest Bank said its own banking systems have not been affected and that customer accounts and banking services were operating normally.
“We do not yet know which clients may be affected. As soon as we do, we will contact those clients directly. We would rather tell you this now than wait until we have a complete picture,” it said.
EasyEquities and Bidvest Bank customers advised to be on guard
While neither EasyEquities nor Bidvest could yet provide customers with any details, they offered general advice on precautions they should take in the meantime.
“As a precaution, please remain alert to any unsolicited emails, calls or messages claiming to be from any unknown entity or EasyEquities that request personal or account information,” EasyEquities said.
“If you are contacted directly by anyone claiming to hold your data as part of this incident, please do not engage and let us know immediately.”
Both companies warned customers not to click on suspicious links or share details with unknown parties.
“Be alert to anyone contacting you about this. Criminals use incidents like this to approach people while they are concerned,” Bidvest Bank said.
“Never share your PIN, password or OTP. Bidvest Bank will never ask you for these — not by phone, not by SMS, not by email. Anyone who asks is not us.”
It also said customers should never move money because someone tells them to. It will never ask customers to transfer funds to a “safe account”.
“If in doubt, end the conversation and call us yourself on the number printed on your bank card or statement. Do not use a number someone gives you,” Bidvest Bank said.
“Check your statements and transaction alerts over the coming weeks, and tell us straight away about anything you do not recognise.”
Loading ...