Illegal and Unauthorised Access to Liberty's IT Infrastructure in its South African Insurance Operations Liberty Holdings Limited Registration number 1968/002095/06 Incorporated in the Republic of South Africa Share code: LBH ISIN code: ZAE0000127148 ("Liberty Holdings" or "the company") LIBERTY HOLDINGS LIMITED ILLEGAL AND UNAUTHORISED ACCESS TO LIBERTY'S IT INFRASTRUCTURE IN ITS SOUTH AFRICAN INSURANCE OPERATIONS Liberty regrets to confirm that it has been subject to illegal and unauthorised access to its IT infrastructure. An external party has illegally obtained data from Liberty and demanded payment. Liberty was alerted of the intrusion into its network late on the evening of 14 June. Liberty specialist teams immediately began investigating the incident, prioritising the protection of customer details and of the security of the company’s IT systems. The relevant authorities were also alerted. As soon as Liberty was able, customers were informed via emails, SMSs and via a media statement on the afternoon of 16 June. The safety and security of Liberty’s customer information is, and remains, the company’s top priority. David Munro, Liberty CEO, says: “Our team of dedicated IT specialists and security personnel have devoted all their efforts around the clock to ensure that we live up to duty of care to protect our customers and their details. We immediately identified and addressed specific vulnerabilities the Liberty IT infrastructure may have had, ensuring the integrity of our customer data. We can confirm that we are in full control of our IT environment. To our customers, we totally understand the concerns they might have about the impact of this act of criminality.” Mr. Munro says: “We did engage with the external parties involved to determine their intentions, but we made no concessions in the face of this attempted extortion.” Liberty is at an advanced stage of investigating the extent of the data breach, which at this stage seems to be largely emails and possibly attachments. Any further updates in this regard will be provided as soon as more facts emerge. At this stage there is no evidence that any customers or the Group have suffered any financial losses. Liberty staff will proactively inform any customers individually if and when it is discovered that they may have been impacted. No further action is required from Liberty’s customers at this stage. Liberty and its management totally understand its customers’ concerns, and deeply regret the possible impact of this act of criminality. 18 June 2018 Queries: Investor Relations Sharon Steyn 011 408 3063 / 083-298-2645 www.libertyholdings.co.za Sponsor Merrill Lynch South Africa (Pty) Limited Date: 18/06/2018 10:30:00 Produced by the JSE SENS Department. The SENS service is an information dissemination service administered by the JSE Limited ('JSE'). The JSE does not, whether expressly, tacitly or implicitly, represent, warrant or in any way guarantee the truth, accuracy or completeness of the information published on SENS. The JSE, their officers, employees and agents accept no liability for (or in respect of) any direct, indirect, incidental or consequential loss or damage of any kind or nature, howsoever arising, from the use of SENS or the use of, or reliance on, information disseminated through SENS.