Third-Party Data Breach Exposes Personal Information of EasyEquities and Satrix Users
EasyEquities and Satrix have disclosed a potential compromise of personal information stemming from a third-party service provider, RelyComply, which handles regulatory verification checks for both platforms. The breach did not affect trading systems, account security, or users’ ability to invest, according to statements from the companies.
EasyEquities, which operates the SatrixNOW platform on behalf of Satrix, confirmed that its internal investigation found no evidence of a direct compromise to its systems or those of its parent company, Purple Group Limited. The third-party provider has launched a forensic investigation to determine the scope and nature of the incident, with final findings still pending. Both companies have pledged to share further updates if necessary.
With nearly 2.9 million users 1.24 million of whom were active as of February 2026 EasyEquities serves as a key investment platform, partly owned by Sanlam. While the exact number of affected users remains undisclosed, the companies have advised users to remain vigilant against phishing attempts and unsolicited requests for personal information.
This incident follows a similar breach at Standard Bank earlier this year, where unauthorized access to internal administrative systems exposed select customer data. Under South Africa’s Protection of Personal Information Act (Popia), such breaches may require reporting to the Information Regulator, though neither EasyEquities nor Satrix has confirmed whether this step has been taken.
Source: https://www.moneyweb.co.za/news/companies-and-deals/easyequities-satrix-hit-by-data-breach/
Satrix cybersecurity rating report: https://www.rankiteo.com/company/satrix
EasyEquities cybersecurity rating report: https://www.rankiteo.com/company/easyequities
RelyComply cybersecurity rating report: https://www.rankiteo.com/company/relycomply
"id": "SATEASREL1789367277",
"linkid": "satrix, easyequities, relycomply",
"type": "Breach",
"date": "3/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Financial Services',
'location': 'South Africa',
'name': 'EasyEquities',
'size': '2.9 million users (1.24 million active as of '
'February 2026)',
'type': 'Investment Platform'},
{'industry': 'Financial Services',
'location': 'South Africa',
'name': 'Satrix',
'type': 'Investment Platform'},
{'industry': 'Regulatory Verification',
'name': 'RelyComply',
'type': 'Third-Party Service Provider'}],
'attack_vector': 'Third-Party Compromise',
'customer_advisories': 'Users advised to remain vigilant against phishing '
'attempts and unsolicited requests for personal '
'information',
'data_breach': {'personally_identifiable_information': 'Likely exposed',
'type_of_data_compromised': 'Personal Information'},
'description': 'EasyEquities and Satrix have disclosed a potential compromise '
'of personal information stemming from a third-party service '
'provider, RelyComply, which handles regulatory verification '
'checks for both platforms. The breach did not affect trading '
'systems, account security, or users’ ability to invest. The '
'third-party provider has launched a forensic investigation to '
'determine the scope and nature of the incident, with final '
'findings still pending.',
'impact': {'data_compromised': 'Personal Information',
'identity_theft_risk': 'Users advised to remain vigilant against '
'phishing attempts and unsolicited requests '
'for personal information',
'operational_impact': 'No impact on trading systems, account '
'security, or users’ ability to invest'},
'investigation_status': 'Ongoing (Forensic investigation by RelyComply)',
'references': [{'source': 'Company Statements'}],
'regulatory_compliance': {'regulations_violated': 'Potential violation of '
'South Africa’s Protection '
'of Personal Information '
'Act (Popia)',
'regulatory_notifications': 'Not confirmed whether '
'reported to the '
'Information Regulator'},
'response': {'communication_strategy': 'Advisories issued to users to remain '
'vigilant against phishing attempts',
'third_party_assistance': 'Forensic investigation launched by '
'RelyComply'},
'title': 'Third-Party Data Breach Exposes Personal Information of '
'EasyEquities and Satrix Users',
'type': 'Data Breach'}