The online investment platform EasyEquities has notified its clients about a potential leak of personal information resulting from a security incident at a third-party service provider.
The company stated that some client personal data may have been compromised after the service provider responsible for part of the client identification and verification process was hacked. This provider confirmed on September 10th that an unauthorized third party gained access to its system.
Serves millions of clients
EasyEquities is one of the largest online investment platforms in South Africa and is part of the financial technology group Purple Group, whose shares are listed on the JSE. The platform allows users to purchase local and international stocks, exchange-traded funds, and other investment products, including fractional shares.
According to interim reports from Purple Group, as of the end of February 2026, the platform had registered 2.87 million clients, with 1.24 million active users.
The company specified that the provider used for part of the client identification and verification process informed them on the evening of September 10, 2026, about the intrusion by an unauthorized third party into its environment. As an immediate measure to localize the issue, integration with this provider was disabled the following day, September 11, 2026.
Not all clients are affected
EasyEquities emphasized that the incident only affects those clients whose data passed through the specific provider, not all platform users. The company stated that it has already contacted the affected clients directly.
It was specifically noted that client accounts, investments, and the ability to trade remained unaffected. The incident relates to the provider that EasyEquities uses for part of the client identification and verification process.
EasyEquities assured that the hack did not affect its own trading systems, asset storage, or company accounts. The company is currently continuing cooperation with the provider as part of ongoing investigations.
Furthermore, EasyEquities has engaged independent cybersecurity specialists and is accelerating the implementation of two-factor authentication across the entire platform.