Important Security Update Regarding Your Lay-by Account Dear Valued Customer,
At Pepkor Lifestyle, we are committed to protecting your personal information and treating your privacy with the utmost seriousness. We are writing to inform you of a security incident involving one of our third-party service providers, which handles our statement communications.
On February 6, 2026, we were alerted that certain layby statements were publicly accessible on the internet via direct web links provided via our official SMS channel, but our investigation confirmed that these statements were accessible without the requirement of a password or authentication on the service provider’s site. By manipulating the URLs provided through our official SMS channel, an individual has the capability of viewing various customer layby statements, one at a time, some belonging to customers of the responsible party (Pepkor Lifestyle) and some belonging to other clients.
What Information Was Involved?
The information visible on the affected statements was limited to (statements issued before 2023):
Upon being notified, we immediately assembled an incident response team and met with the leadership at our third-party service provider. The following measures have been completed:
How You Can Protect Yourself
While the exposed information was limited, it could potentially be used by unauthorised parties for social engineering or scams. We recommend taking the following steps to ensure your continued security:
We sincerely apologise for this incident and any concern it may cause. We are implementing failsafe solutions to ensure that our communication platforms remain secure and that your data is always protected.
If you have any questions, please do not hesitate to contact us at [email protected] .
The Pepkor Lifestyle Team