Notification in terms of section 22 of the Protection of Personal Information Act, 2013

NFB Private Wealth Management (Pty) Ltd (“NFB”) is providing you with this notification in accordance with section 22 of the Protection of Personal Information Act, 2013 (POPIA).

What happened

On Tuesday, 26 May 2026, an email sent by NFB was inadvertently addressed and transmitted to an unintended external recipient.

The incident occurred as a result of human error in selecting the incorrect recipient and did not arise from any cyber-attack, hacking incident, or compromise of NFB’s systems.

Once the error was identified, the recipient was immediately contacted and instructed to delete the email and any attachments. The recipient confirmed in writing that the email and its contents were deleted.

What information was involved

The email was part of routine internal marketing correspondence.

• The email contained the following personal information:
  • Full name;
  • Telephone number;
  • An internal client grouping label used for administrative segmentation; and
  • Portfolio market value.
• The email did not contain:
  • passwords or login credentials;
  • banking or payment details;
  • payment instructions; or
  • special personal information as defined in the Protection of Personal Information Act, 2013 (“POPIA”).

What we have done

As immediate containment and remedial steps, we:

• instructed the unintended recipient to delete the email and attachments;
• obtained written confirmation of deletion;
• logged the incident internally as a privacy incident; and
• assessed the matter against our obligations under POPIA and our internal information-security policies.

There is no indication that the information was further accessed, disclosed, retained, or misused.

Possible consequences

At this stage, the primary impact is that an identified unintended recipient briefly had access to the email described above, but did not open the email or its attachment.

Based on the steps taken and confirmation received, no further adverse consequences have been identified.

Recommended steps you may take

Based on our current assessment, we do not believe that this incident is likely to result in adverse consequences to you. However, POPIA requires NFB to advise affected clients of reasonable steps they may take to protect themselves.

As a reasonable precaution, we recommend that you remain alert to any unusual or suspicious communications that purport to relate to your investments or your relationship with NFB, and that you contact us immediately should anything of concern arise.

Identity of unintended recipient

The unintended recipient is a trusted, long-standing services provider (with whom we have signed a non-disclosure agreement) and has confirmed deletion of the email. There is no evidence that the information was accessed by any other person or further disseminated.

Further information and updates

Should any material new information come to light, this notice will be updated.

Should you have any questions or wish to discuss this matter further, please feel free to contact our Information Officer via email [email protected] or telephonically 041 582 3990.

We regret this incident and confirm that appropriate actions have been taken to address the matter and mitigate the risk of recurrence.

NFB Private Wealth Management (Pty) Ltd
Issued by Adv F. van Biljon, Information Officer