Security compromise in terms of section 22(1)(b) of the Protection of Person Information Act, 2013 WESIZWE PLATINUM LIMITED (Incorporated in the Republic of South Africa) Registration number: 2003/020161/06 Share code: WEZ ISIN number: ZAE000075859 ("Wesizwe" or "the Company") VOLUNTARY ANNOUNCEMENT TO THE MARKET: SECURITY COMPROMISE IN TERMS OF SECTION 22(1)(B) OF THE PROTECTION OF PERSONAL INFORMATION ACT, 2013 Shareholders are hereby advised that on 9 December 2024, Wesizwe management detected that the Company's information management systems have been compromised. The Information Technology (IT) team with the support of management has been investigating the matter and the extent of the impact since it came to their attention. While our investigation is ongoing, the potentially impacted data may relate to Wesizwe's Legal, Finance, Procurement and Human Resources functions and include personal information relating to natural and juristic persons. This notice seeks to inform stakeholders of the incident and provide information regarding immediate measures that the Company is taking in order to mitigate the further negative impact to its business and its stakeholders. We would like to assure stakeholders that Wesizwe is taking the necessary measures to ensure that this situation is contained and remediated in order to restore the reliability of its information systems Wesizwe, has shut down its systems and the internet to avoid further damage. The matter has been reported to the South African Police Services Cyber Crimes division and the company is engaging with our IM service providers to investigate the extent of the impact and possible recovery solutions. Wesizwe is also engaging cybersecurity and forensic experts to work with its capable in-house IT team to manage the situation and assist with development of additional controls to avoid a reoccurrence. Plans are being put in place to revert to manual communication means in order to ensure business continuity. Further steps to be taken include the notification of the Information Regulator (South Africa) and cooperation with all relevant authorities as required. Wesizwe will communicate with all relevant stakeholders and suppliers to provide them alternative means of communication with Wesizwe while we recover and secure our systems. Further updates regarding this matter will be provided as new information becomes available. Johannesburg 10 December 2024 Sponsor PSG Capital Date: 10-12-2024 01:42:00 Produced by the JSE SENS Department. The SENS service is an information dissemination service administered by the JSE Limited ('JSE'). The JSE does not, whether expressly, tacitly or implicitly, represent, warrant or in any way guarantee the truth, accuracy or completeness of the information published on SENS. The JSE, their officers, employees and agents accept no liability for (or in respect of) any direct, indirect, incidental or consequential loss or damage of any kind or nature, howsoever arising, from the use of SENS or the use of, or reliance on, information disseminated through SENS.