Cybercriminals Siphon R300 Million from South African Taxpayers Over a Decade
Image Source: Dean Macpherson via X
Published by Everything ZA News
Johannesburg — In a startling revelation, the South African Department of Public Works and Infrastructure has disclosed that cybercriminals have stolen at least R300 million from taxpayers over the past ten years, exploiting security flaws within the department. This disclosure was made by the newly appointed Public Works Minister, Dean Macpherson, in a statement on Wednesday.
Minister Macpherson described the decade-long heist as “an elaborate scheme by cyber-hackers, and potentially officials within the department.” The minister’s statement emphasized the gravity of the situation, highlighting the possibility of insider involvement in the cyber theft that has gone undetected for so long.
“It is unthinkable that this has gone on for so long without being noticed,” Macpherson said. “To build trust with South Africans, we must be transparent about the problems we face. We will ensure that financial controls are tightened, and we hold those responsible accountable for their actions.”
The full extent of the breach was uncovered following an incident in May 2024, when attackers absconded with another R24 million. This prompted a comprehensive forensic investigation involving the Hawks, South African Police Services, State Security Agency, and ICT and cybersecurity experts.
The discovery of the security breach came during detailed assessments conducted by Macpherson and Deputy Minister Sihle Zikalala, alongside briefings from various department branches. Macpherson expressed appreciation for the initial swift investigation initiated by his predecessor, now Deputy Minister Zikalala.
“The department has suffered a massive financial loss, and those responsible for protecting us from cyber criminals must be held to account. We need answers as to what happened under their watch,” Macpherson said.
In response to the revelations, four officials have been suspended, including three in senior management and one middle manager. Investigators have also seized 30 laptops as part of the ongoing investigation. The department was compelled to shut down all its payment systems, resulting in significant delays in the payment of its creditors.
The investigation, assisted by Absa and the South African Reserve Bank, identified the security vulnerabilities that the hackers exploited. Macpherson emphasized the need for a swift conclusion to the investigation and the recovery of the stolen funds.
“We are appealing to the team probing this security breach to conclude their investigation with speed,” Macpherson said. “We do not want prolonged investigations with no results and consequences. There is simply no place for corruption in this department.”
He continued, “We also ask the investigators to trace and follow the money and ensure that it is brought back to the coffers of government.”
As the investigation proceeds, the public and government officials alike are left grappling with the implications of such a significant and prolonged breach, highlighting the urgent need for robust cybersecurity measures and transparency within public institutions.
About The Author
