EasyEquities and Satrix Report Data Breach via RelyComply

In Short

EasyEquities and Satrix say personal information may have been exposed in a third-party incident. The issue relates to RelyComply, a service provider used in their operations.

What Happened

EasyEquities and Satrix reported a potential data breach on September 14, 2026. EasyEquities operates SatrixNOW for Satrix, and both firms said the incident may involve a compromise of personal information linked to their third-party provider RelyComply.

A third-party provider is an external company that handles some tasks on behalf of another business, for example compliance checks, customer onboarding, or document processing. When a vendor is hit, customer data can be affected even if the main platform systems are not directly attacked.

The companies did not say how many customers might be affected, or exactly what types of personal data were exposed. They described it as a potential compromise, which usually means an investigation is still ongoing and the full scope may not be confirmed yet.

Both firms advised customers to stay alert for suspicious messages. They specifically warned about unsolicited calls, emails, or texts that request personal details or account information. This is a common follow-on risk after breaches, when criminals use leaked contact details to run phishing scams, which are fake messages designed to trick people into handing over passwords, PINs, or one-time codes.

Why It Matters

Retail investing platforms and ETF brands hold sensitive identity and contact data. Even limited exposure can increase fraud attempts, including account takeover (when someone hijacks your login) or social engineering (when scammers talk you into sharing security details).

The incident also highlights third-party risk in fintech and wealth products. As platforms rely more on outside vendors, investors and operators will watch how quickly firms can confirm impact, notify users, and tighten vendor security controls.