LIBERTY HOLDINGS LIMITED - Illegal and Unauthorised Access to Liberty's IT Infrastructure in its South African Insurance Operations

Illegal and Unauthorised Access to Liberty's IT Infrastructure in its South African Insurance Operations

Liberty Holdings Limited
Registration number 1968/002095/06
Incorporated in the Republic of South Africa
Share code: LBH
ISIN code: ZAE0000127148
("Liberty Holdings" or "the company")
LIBERTY HOLDINGS LIMITED

ILLEGAL AND UNAUTHORISED ACCESS TO LIBERTY'S IT INFRASTRUCTURE IN ITS SOUTH
AFRICAN INSURANCE OPERATIONS

Liberty regrets to confirm that it has been subject to illegal and
unauthorised access to its IT infrastructure. An external party has illegally
obtained data from Liberty and demanded payment.

Liberty was alerted of the intrusion into its network late on the evening of
14 June. Liberty specialist teams immediately began investigating the
incident, prioritising the protection of customer details and of the security
of the company’s IT systems. The relevant authorities were also alerted. As
soon as Liberty was able, customers were informed via emails, SMSs and via
a media statement on the afternoon of 16 June.

The safety and security of Liberty’s customer information is, and remains,
the company’s top priority.

David Munro, Liberty CEO, says: “Our team of dedicated IT specialists and
security personnel have devoted all their efforts around the clock to ensure
that we live up to duty of care to protect our customers and their details.
We immediately identified and addressed specific vulnerabilities the Liberty
IT infrastructure may have had, ensuring the integrity of our customer data.
We can confirm that we are in full control of our IT environment. To our
customers, we totally understand the concerns they might have about the
impact of this act of criminality.”

Mr. Munro says: “We did engage with the external parties involved to determine
their intentions, but we made no concessions in the face of this attempted
extortion.”

Liberty is at an advanced stage of investigating the extent of the data
breach, which at this stage seems to be largely emails and possibly
attachments. Any further updates in this regard will be provided as soon as
more facts emerge.

At this stage there is no evidence that any customers or the Group have
suffered any financial losses. Liberty staff will proactively inform any
customers individually if and when it is discovered that they may have been
impacted. No further action is required from Liberty’s customers at this
stage.

Liberty and its management totally understand its customers’ concerns, and
deeply regret the possible impact of this act of criminality.

18 June 2018

Queries:

Investor Relations
Sharon Steyn 011 408 3063 / 083-298-2645
www.libertyholdings.co.za

Sponsor
Merrill Lynch South Africa (Pty) Limited

Date: 18/06/2018 10:30:00 Produced by the JSE SENS Department. The SENS service is an information dissemination service administered by the JSE Limited ('JSE'). 
The JSE does not, whether expressly, tacitly or implicitly, represent, warrant or in any way guarantee the truth, accuracy or completeness of
 the information published on SENS. The JSE, their officers, employees and agents accept no liability for (or in respect of) any direct, 
indirect, incidental or consequential loss or damage of any kind or nature, howsoever arising, from the use of SENS or the use of, or reliance on,
 information disseminated through SENS.