- For more financial news, visit News24 Business.
Sanlam has said several of its clients have had their personal data breached in an incident affecting one of its third-party service providers.
A project and task management system had been breached, it said.
Organisations usually use these systems to assign tasks and break down large projects into smaller, actionable ones.
News24 became aware of the incident through a LinkedIn post that purported to show a screenshot of a message from Sanlam Corporate informing a member that their personal data was included in the affected system.
The notice indicated that the information involved may include their name and surname, ID number, email address and contact number.
Sanlam’s official LinkedIn account responded to the post, confirming that the communication was official.
News24 reached out to Sanlam to confirm more details about the incident, including when it occurred, how many of its clients were affected, whether it was limited to certain divisions, and whether all affected customers were informed.
While many of these details were not given, Sanlam said its own technology environment had not been breached and indicated that it had not yet received any indication that the affected information had been shared publicly or used unlawfully.
“As soon as we were made aware, Sanlam activated its incident response protocols, working with the affected service provider, independent cybersecurity experts, and internal risk teams to ensure containment measures were implemented to secure the environment.”
Sanlam said it had informed the Information Regulator of the incident, as required by law.
“Protecting client information and maintaining operational resilience remain critical priorities for Sanlam. We are committed to continuously improving our systems to minimise future risks,” it said.
3989
