Third-Party Data Breach Exposes Personal Information of EasyEquities and Satrix Users EasyEquities and Satrix have disclosed a potential compromise of personal information stemming from a third-party service provider, RelyComply, which handles regulatory verification checks for both platforms. The breach did not affect trading systems, account security, or users’ ability to invest, according to statements from the companies. EasyEquities, which operates the SatrixNOW platform on behalf of Satrix, confirmed that its internal investigation found no evidence of a direct compromise to its systems or those of its parent company, Purple Group Limited. The third-party provider has launched a forensic investigation to determine the scope and nature of the incident, with final findings still pending. Both companies have pledged to share further updates if necessary. With nearly 2.9 million users 1.24 million of whom were active as of February 2026 EasyEquities serves as a key investment platform, partly owned by Sanlam. While the exact number of affected users remains undisclosed, the companies have advised users to remain vigilant against phishing attempts and unsolicited requests for personal information. This incident follows a similar breach at Standard Bank earlier this year, where unauthorized access to internal administrative systems exposed select customer data. Under South Africa’s Protection of Personal Information Act (Popia), such breaches may require reporting to the Information Regulator, though neither EasyEquities nor Satrix has confirmed whether this step has been taken.