> ## Content Index
> Fetch the complete content index at: https://thecoverwire.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Old Mutual says provider error may have exposed customer phone numbers
- URL: https://thecoverwire.com/old-mutual-provider-configuration-error-customer-data/
- Published: 2026-10-18T14:45:00.000Z
- Updated: 2026-11-02T11:34:52.000Z
- Description: It is the second incident involving an Old Mutual service provider this year, after a vendor account was compromised in June.
- Author: CoverWire
- Tags: Cyber, #desk-risk

Old Mutual has warned some customers that a service provider's configuration error may have exposed mobile numbers and email addresses, although the insurer said there was no evidence of unauthorised access or misuse.

Moneyweb reported the disclosure on 16 October. Old Mutual said the error meant certain files at the provider may have been accessible without the intended security controls.

"Importantly, this was not a cyberattack," the South African insurer said. "There is no evidence of hacking, malware, unauthorised system intrusion or attempts to bypass security measures."

Old Mutual said the personal information involved was limited to a mobile number, an email address or a combination of the two. Some records contained only free-text responses and no personal information about identifiable people.

The insurer said it had resolved the issue and strengthened safeguards. It found no evidence that an unauthorised party had accessed or misused the information.

In a message to clients, Old Mutual said: "At this stage, there is no indication of any unauthorised use of this information. Your policy, benefits and accounts remain secure and unaffected."

It also warned customers not to share a PIN, password or one-time password. The group notified potentially affected customers as a precaution under the Protection of Personal Information Act.

The insurer reported another third-party incident earlier in the year. On 12 June, it identified unauthorised access to a limited set of customer data in a secure file transfer environment after a vendor support account was compromised.

Old Mutual said in its 18 June advisory that the earlier data may have included names, identity numbers, policy details and information about beneficiaries. Payment and banking information was not accessed.

The June case involved a compromised vendor account, while Old Mutual says the October exposure came from a configuration mistake.

Related coverage: [Brit adds cyber to Acturis Package for brokers at commercial renewal](https://thecoverwire.com/brit-cyber-launches-on-acturis-package/) and [CRC says US SME cyber renewal prices rose 7.5% in September](https://thecoverwire.com/crc-cyber-redy-index-q3-sme-pricing-floor/).

## Sources

- [Moneyweb: Old Mutual client data exposed in service provider error](https://www.moneyweb.co.za/news-fast-news/old-mutual-client-data-exposed-in-service-provider-error/?ref=thecoverwire.com)
- [Old Mutual: Customer information security incident (June 2026)](https://www.oldmutual.co.za/news/customer-information-security-incident/?ref=thecoverwire.com)