Geneva, 29 January 2015 STRICTLY PRIVATE AND CONFIDENTIAL Dear [insert client name], We wrote to you in March 2010 to inform you that our Bank was the victim of a serious data theft perpetrated in 2006/2007 by a former IT technician. The data that was stolen included information regarding your account(s) prior to April 2007. We have learned that certain media organisations, including the International Consortium of Investigative Journalists, have gained access to the stolen client information through an unknown third party. A number of clients have informed us that they have been contacted by the press in an attempt to obtain information concerning their private financial arrangements. HSBC has retained leading litigation lawyers who are advising us on if and how it is possible to restrict the publication of confidential client information. Despite these efforts and our engagement with the media, there is a risk that historic client data may appear in the public domain.Please do not hesitate to contact your Relationship Manager should you have any questions. In case you wish to seek independent legal advice, your advisers are welcome to contact us at If you receive any media enquiries, you may wish to seek legal advice before deciding how to react, if at all. We willcontinue to take all reasonable steps to minimise the impact of the media’s potential intrusion into your privacy. We sincerely apologise for any inconvenience caused. Yours sincerely, Andreas von PlantaFranco MorraChairman of the Board Chief Executive Officer HSBC Private Bank (Suisse) SA HSBC Private Bank (Suisse) SA