On Friday, 12 June, Old Mutual identified a cybersecurity incident involving a third-party service provider. The incident resulted in unauthorised access to a limited set of customer data held within a secure file transfer environment, following the compromise of a vendor support account.
Upon detection, Old Mutual immediately activated its incident response protocols, isolated the affected environment, disabled access, and initiated a full investigation with internal cybersecurity teams and external specialists.
Based on current findings, access was limited to a specific account and a restricted set of operational files. There is no evidence at this stage that any of Old Mutual’s core systems or historical archived data were accessed.
The information accessed relates to policy administration records and may include personal information such as names, identity numbers, policy details, and, in some cases, information about beneficiaries and dependants, payment and banking information were not accessed. Our core systems remain fully operational. Old Mutual has notified the affected customers directly and has also informed relevant regulatory authorities in line with applicable requirements.
What this means for the customer
As a precaution, individuals may consider taking the following steps:
- Register for free at the South African Fraud Protection Services (SAFPS) to monitor your bank and credit accounts
- Be cautious of unsolicited emails, phone calls or messages requesting personal information such as ID numbers, passwords or banking details.
- If you receive suspicious communication claiming to be from Old Mutual, do not share personal information and verify the request through official channels.
- Monitor financial and credit statements for any unusual or suspicious activity.
The protection of personal information remains a priority for Old Mutual Group. The situation continues to be monitored, and further updates will be provided where appropriate.
We regret any concern this incident may cause and remain committed to protecting the information entrusted to us.
- Be cautious of unexpected calls, emails, or messages requesting changes to policy, beneficiary, banking or contact details.
- Never share passwords, PINs, one-time passwords (OTPs), or security details that could be used for unauthorised transactions.
- Monitor for any suspicious activity relating to their identity or financial profile.
- Report any suspicious communications or suspected misuse of their information to Old Mutual through the dedicated contact channel.
- Taken immediate action to prevent further unauthorised access to the affected environment.
- Launched a detailed investigation into the incident.
- Engaged relevant internal and external stakeholders to assess the impact.
- Notified the relevant regulatory authorities where required.
- Continued to monitor the situation and assess any potential misuse of the impacted information.
Old Mutual was notified of the incident on 12 June 2026 and identified a cybersecurity incident involving a third-party service provider, which resulted in unauthorised access to a limited subset of customer policy information. Upon detection, Old Mutual immediately activated its incident response protocols, secured the affected environment, and engaged internal and external cybersecurity specialists to investigate the matter and prevent any further unauthorised access.
Based on the information available at this stage, the affected data may include personal and policy-related information, such as names and identification numbers, as well as beneficiary data and other benefit-related details.
Old Mutual recently identified a security incident involving one of our service providers. We took immediate action to prevent further unauthorised access and are continuing to investigate the matter. Importantly, your policy cover, benefits and claims remain unaffected, and our core policy administration systems were not compromised. We can assure you that no payment-related information, such as banking details, was accessed.
At this stage, we have not identified any fraudulent accounts at Old Mutual linked to this incident. We continue to monitor the situation and investigate any potential misuse of information. If you become aware of any suspicious activity involving your personal information, please report it immediately by contacting your financial services provider, calling our dedicated number on 0800 66 99 88, or emailing GSFMQueries@oldmutual.com.
This incident relates to a third-party service provider that provides policy administration services to Old Mutual. We are investigating the circumstances surrounding the incident and can assure our customers that access to Old Mutual systems has since been restricted to a limited set of operational files.
At this stage, there is no evidence that customer policies have been accessed or altered by unauthorised parties. Customers’ policy benefits and claims processes remain unaffected. We continue to monitor our systems and will communicate any relevant updates. Customers should report any suspicious activity immediately to their FSPs directly, through our dedicated support line on 0800 66 99 88, or by visiting www.oldmutual.com.
Old Mutual is contacting affected customers directly through official communication channels. If you receive a notification from Old Mutual about this incident, please follow the guidance provided in that communication. If you have not received a notification, no action is required at this stage; however, we encourage all customers to remain alert to suspicious calls, emails, SMSs or WhatsApp messages requesting personal information, passwords, PINs or OTPs.
Customers should:
Old Mutual has:
Yes. Customers can continue accessing Old Mutual’s secure services. We have implemented additional safeguards and continue to monitor our systems and environment.
Old Mutual will assess the circumstances of each affected customer and communicate any relevant support measures where appropriate. This will be facilitated through the dedicated support line on 0800 66 99 88 and the customer’s FSP.