NYAX

Nayax: information security incident update

Nayax cyber incident contained; no material impact on operations or finances

<section class="insight" data-version="1">
  <section data-block="information">
    <h3>Information</h3>
    <p>&lt;link type=&quot;text/css&quot; rel=&quot;stylesheet&quot; href=&quot;https://www.globenewswire.com/styles/gnw_nitf.css&quot;&gt;&lt;/li...</p>
  </section>

  <section data-block="ai-summary-paragraph">
    <h3>AI Summary</h3>
    <p>Nayax reports completion of system remediation with no unauthorized access and no disruption to core operations. The investigation indicates exfiltrated data comprises scanned-document backups and some payment records, but no cardholder data and tokens used in digital wallets mitigate risk. The board rejected extortion demands, and while remediation costs may arise, management does not expect a material effect on financials.</p>
  </section>

  <section data-block="ai-summary-bullets">
    <h3>Key Points</h3>
    <ul><li>System review complete; no unauthorized access found. Production environment unaffected.</li><li>Exfiltrated data includes backups of scanned documents and payment records; no cardholder data.</li><li>Many transactions used Apple Pay/Google Pay tokens; tokens have no value if disclosed. Customer funds untouched.</li><li>Board won&#039;t comply with extortion; prioritizes long-term customer/shareholder interests.</li><li>Remediation costs may accrue; full financial impact not yet determined, but no material effect expected.</li></ul>
  </section>

  <section data-block="companies-mentioned">
    <h3>Companies Mentioned</h3>
    <ul><li><strong>Nayax Ltd (NYAX)</strong>: Update indicates containment; business operations continue with potential remediation costs.</li><li><strong>Apple Inc. (AAPL)</strong>: Apple Pay usage mentioned; tokenization reduces exposure to payment data theft.</li><li><strong>Alphabet Inc. (GOOGL)</strong>: Google Pay usage mentioned; tokenization reduces exposure to payment data theft.</li></ul>
  </section>

  <section data-block="category">
    <h3>Corporate Developments</h3>
    <p>Category: Corporate Developments. The update concerns a security incident and governance response rather than earnings or M&amp;A, fitting a corporate actions/operational reliability lens.</p>
  </section>

  <section data-block="market-moving">
    <h3>Market-Moving</h3>
    <ul><li>Remediation costs may weigh on near-term expenses.</li><li>No material impact to operations suggests limited upside risk or downside from this event.</li><li>Digital wallet tokenization reduces potential data-compromise impact.</li></ul>
  </section>

  <section data-block="key-facts">
    <h3>Key Facts</h3>
    <ul><li>Update date: July 14, 2026; follow-up to July 8, 2026 notice.</li><li>Exfiltrated data includes backups of scanned documents and payment records; no cardholder data.</li><li>Many transactions used Apple Pay/Google Pay tokens; tokens have no value if disclosed.</li><li>All customer safeguarded funds were untouched; no unauthorized access to those accounts.</li><li>Board resolved not to comply with criminal extortion demands; remediation costs ongoing; no material financial impact expected.</li></ul>
  </section>

  <section data-block="trading-thesis">
    <h3>Trading Thesis</h3>
    <p>Neutral on NYAX in near term; incident risks appear contained and non-material.</p>
  </section>
</section>


<article><p>HERZLIYA, Israel, July 14, 2026 (GLOBE NEWSWIRE) -- Further to Nayax’s announcement dated July 8, 2026, regarding a suspected information security incident, the Company provides the following update. The Company's system review and technical remediation activities have been completed, and the Company's systems have been cleared and based on its investigation to date, confirmed to be free of unauthorized access.</p>

<section>
  <h3>Operational status and business continuity</h3>
  <p>The Company's production environment and core systems have not been impacted. The Company's business operations continue as normal, without disruption or impact on our operations.</p>
</section>

<section>
  <h3>Exfiltrated information and data security details</h3>
  <p>As the Company's investigation progressed, and while the precise scope and complete contents of the exfiltrated information are still under investigation, findings have emerged indicating that such exfiltrated information includes a copy of a backup of scanned documents, additional business-related information, and mainly back up of payment transaction records which does not include sensitive payment authentication data (such as cardholder names, CVV values or ID information), as such information is generally not retained within the Company's systems. In addition, a significant portion of the transactions were conducted using digital wallets, such as Apple Pay and Google Pay, in which the payment credentials consist of single-use tokens that have no value if disclosed. Based on its investigation to date, the Company confirms that all customer safeguarded funds were untouched and that no unauthorized access to those accounts occurred.</p>
</section>

<section>
  <h3>Board stance on extortion and financial impact</h3>
  <p>The Company's Board of Directors has resolved not to comply with criminal extortion demands. The Board believes that complying with such demands would not be consistent with the long-term best interests of the Company's customers, partners, employees and shareholders.</p>
  <p>The Company has incurred, and may continue to incur, costs related to responding to, remediating, and investigating this attack. The full financial impact-including insurance or indemnification offsets and any effect on customer behavior-is not yet determined, but the Company does not currently expect a material effect on its financial condition or results of operations.</p>
</section>

<section>
  <h3>Cooperation with authorities</h3>
  <p>The Company continues to cooperate fully and closely with the relevant law enforcement authorities, which continue to conduct an intensive investigation into the incident and those responsible.</p>
</section>

<section>
  <h3>Contacts for Nayax (NYAX)</h3>
  <p><strong>Nayax Public Relations Contact:</strong><br>
  Scott Gamm<br>
  Strategy Voice Associates<br>
  <a href="https://www.globenewswire.com/Tracker?data=sdG1k8dXEE5YmCFz-uFGYx4tbm3S_hM3mKyMiIc19o47NUdlxhYtT5gQ7Ua4kH_bG8kLxaG1KHjy_jGenkb6a458T6kesxt-qkeuKSZjVDJ7TuYe-CPOKrTG_cHqZhpUpU7DbZaBTBArgdR080T5mg==" rel="nofollow" target="_blank">Scott@strategyvoiceassociates.com</a></p>
  <p><strong>Nayax Investor Relations Contact:</strong><br>
  Aaron Greenberg<br>
  Chief Strategy Officer<br>
  <a href="https://www.globenewswire.com/Tracker?data=dmtGFANLfmf_9f32M5t9XxNyrE8huYffsM8J6fFo-XvnLayucS9KsRxAnSFw1prQgtVc5f9iYmfHIatVb5YL2A==" rel="nofollow" target="_blank">IR@nayax.com</a></p>
</section>

<section>
  <img alt="Nayax logo" class="__GNW8366DE3E__IMG" src="https://www.globenewswire.com/newsroom/ti?nf=OTc2MTczOSM3NzA0OTkyIzIyNDg4NDA=">
  <br>
  <img alt="Nayax branding" src="https://ml.globenewswire.com/media/NDAyNjk3ZDctODQ1NS00ODRiLThjMzUtMzZkOGI0MDQ3OWVlLTEyNjAzOTMtMjAyNi0wNy0xNC1lbg==/tiny/Nayax-Ltd.png" referrerpolicy="no-referrer-when-downgrade">
</section></article>

Nayax reports completion of system remediation with no unauthorized access and no disruption to core operations. The investigation indicates exfiltrated data comprises scanned-document backups and some payment records, but no cardholder data and tokens used in digital wallets mitigate risk. The board rejected extortion demands, and while remediation costs may arise, management does not expect a material effect on financials.

Nayax: information security incident update

AI Summary

Sentiment Rationale

Trading Thesis

Market-Moving

Key Facts

Companies Mentioned

Corporate Developments

Related News