Announcement

PRESS RELEASE

“Update regarding a limited-scope cybersecurity incident affecting WorldBridge systems”

Athens, August 1^st 2026

Worldbridge Payment Institution S.A., operating under the trade name Paylink, announces that on 27 July 2026 it confirmed a limited cybersecurity incident involving unauthorized access to certain information systems. The incident did not disrupt the Company’s operations, the services provided to its customers, or the processing of electronic transactions. It should be noted that the Company does not store customers’ payment card information or details of other payment methods.

Specifically, based on the investigation conducted to date, it was determined that an unauthorized third party gained access to a limited number of files containing, among other information, personal data.

The Company immediately notified the competent authorities, in accordance with applicable requirements, and is cooperating fully with them. At the same time, its cyber incident response procedures were activated. The affected systems were isolated, and the unauthorized access was contained.

The investigation is being carried out by our technical team with the support of specialized and certified cybersecurity and digital forensics experts. Additional technical and organizational security measures have already been implemented, as safeguarding personal data remains our highest priority.

As part of these efforts, we are continuously monitoring specialized online sources to identify any indication that the data may have been published, offered for sale, or otherwise maliciously used. We are also monitoring for potential impersonation attempts, fraudulent websites, fake accounts, and malicious communications that may misuse the Company’s name, brand, or identifying characteristics.

How to Protect Yourself

Worldbridge Payment Institution S.A., operating under the trade name Paylink, does not maintain bank accounts or payment accounts for individuals or legal entities. It operates exclusively as a provider of direct money transfer services and does not have access to any of your bank accounts.

We therefore recommend that you:

• exercise particular caution when receiving emails, SMS messages, or other communications requesting that you disclose personal information or provide personal or financial details;
• avoid clicking on links or opening attachments unless you are certain of their origin;
• never send copies of identity documents in response to unverified telephone calls or electronic requests;
• notify us immediately if you receive any suspicious communication that appears to originate from, or be sent on behalf of, the Company.

How to Contact Us

For information, support, or to report suspicious communications, please call: 800 100 2020 or email us at: info@paylink.gr