VOLUNTARY ANNOUNCEMENT TO THE MARKET: SECURITY COMPROMISE IN TERMS
OF SECTION 22(1)(B) OF THE PROTECTION OF PERSONAL INFORMATION ACT, 2013
Shareholders are hereby advised that on 9 December 2024, Wesizwe Platinum Limited
(Wesizwe) Management detected that the company’s information management systems have
been compromised. The Information Technology (IT) team with the support of management
has been investigating the matter and the extent of the impact since it came to their attention.
Since then, further information has emerged regarding the unlawful withholding (hijacking) of
files/ data accessed illegally by the unauthorised external threat actor for ransom.
While our investigation is ongoing, the potentially impacted data may relate to Wesizwe’s
Legal, Finance, Procurement and Human Resources functions and include personal
information relating to natural and juristic persons.
This notice seeks to inform stakeholders of the incident and provide information regarding
immediate measures that the company is taking in order to mitigate the further negative impact
to its business and its stakeholders. We would like to assure stakeholders that Wesizwe is
taking the necessary measures to ensure that this situation is contained and remediated in
order to restore the reliability of its information systems
Wesizwe, has shut down its systems and the internet to avoid further damage. The matter
has been reported to the South African Police Services Cyber Crimes division and the
company is engaging with our IM service providers to investigate the extent of the impact and
possible recovery solutions. Wesizwe is also engaging cybersecurity and forensic experts to
work with its capable in-house IT team to manage the situation and assist with development
of additional controls to avoid a reoccurrence. Plans are being put in place to revert to manual
communication means in order to ensure business continuity.
Further steps to be taken include the notification of the Information Regulator (South Africa)
and cooperation with all relevant authorities as required. Wesizwe will communicate with all
relevant stakeholders and suppliers to provide them alternative means of communication with
Wesizwe while we recover and secure our systems.
Further updates regarding this matter will be provided as new information becomes available.
Johannesburg
10 December 2024
Sponsor
PSG Capital