FiveWest Statement on Cybersecurity Incident

Cape Town, 17 September 2026 – FiveWest today confirmed that it has concluded its investigation into a cybersecurity incident involving unauthorised access to part of its technology environment.

Based on the findings of the investigation, FiveWest has established that an unauthorised third party gained access to and exfiltrated certain documents held within its environment.

Importantly, the investigation found no indication that client funds, wallet balances, trading activity, transaction records, transfer histories, wallet histories or authentication credentials were compromised as part of the incident.

All parties identified as affected by the incident have been notified directly.

Upon identifying the unauthorised activity, FiveWest activated its incident response procedures, contained and secured the affected environment, and engaged independent cybersecurity specialists to investigate the incident and assist in strengthening its security controls.

FiveWest has notified the Information Regulator and, to the best of its knowledge, has complied with its applicable obligations under the Protection of Personal Information Act 4 of 2013 and the General Data Protection Regulation.

Key facts:

• The investigation has concluded and confirmed that certain documents were accessed and exfiltrated by an unauthorised third party.
• All parties identified as affected have been notified directly.

• Client funds remain secure.
• The investigation found no indication that wallet balances, trading activity, transaction records, transfer histories, wallet histories or authentication credentials were compromised.
• FiveWest's internal and external cybersecurity teams continue to monitor the situation and have identified no new activity relating to the incident.

FiveWest is aware of statements circulated online concerning the nature and extent of the incident. Based on the evidence identified through its investigation, FiveWest considers a number of these claims to be highly sensationalised and not supported by the findings of the investigation. The Telegram group through which certain claims relating to the incident were circulated has since been shut down.

"The moment we identified unusual activity, our team acted to contain it and brought in independent cybersecurity specialists to investigate. Since then, our focus has been on understanding exactly what happened, addressing the findings and implementing their recommendations to make our infrastructure even more resilient."

– Tayla Wilson, COO, FiveWest

FiveWest continues to advise clients to remain vigilant against phishing emails, fraudulent calls and other unsolicited communications requesting confidential information, authentication credentials or transaction authorisation. Clients who receive any communication purporting to be from FiveWest that appears unusual should contact the company through official support channels before taking any action.

FiveWest will continue to monitor the situation and will take any further steps required should new information relating to the incident emerge.