Pretoria – At least R300 million was stolen by cyber criminals from the Department of Public Works and Infrastructure (DPWI) in the last 10 years, an investigation has revealed.
In the latest cyber attack in May 2024, hackers stole a further R24 million, the department revealed in a statement released Wednesday, (10 July 2024).
“This prompted a full forensic investigation by the Hawks, South African Police Services, State Security Agency, and experts in the ICT and cyber security industry,” the department said.
The anomaly was uncovered when Public Works and Infrastructure Minister Dean Macpherson and Deputy Minister Sihle Zikalala conducted a detailed assessment of the department’s work.
“It has become clear that the department has been a soft target and playground for cyber criminals for over a 10-year period and this should have been picked up a lot earlier,” said Minister Macpherson.
“I felt it important to let South Africa know what has happened and what we are doing about it.
“I cannot discount the possibility of collusion between officials and criminals in this prolonged period of theft.
“It is clear that we need better financial controls which I have said to the department are a matter of urgency.”
The Minister pledged to crack down on “these syndicates” and those in cahoots with them internally or externally.
“We want to put a stop to this immediately because we cannot allow our department to be subjected to unchecked looting,” said Minister Macpherson.
“This is money that could have been spent on our infrastructure drive to improve the lives of South Africans.
“The investigation will be expanded and deepened to find the masterminds and the beneficiaries of this grand theft, and I want to see them in prison.”
Minister Macpherson said four DPWI officials had been suspended and 30 laptops seized by the investigators.
The suspended officials include three senior management officials and one from middle management.
The minister said the department was forced to shut down all its payment system causing significant delays in the payment of its creditors.
In May the department announced that it has ordered a full forensic probe into what it called are vulnerabilities in the department’s information and technology systems.
The department identified the cyber-security vulnerabilities with the assistance of its banking partners including ABSA and the South African Reserve Bank.
The investigation which involved cyber and ICT security experts covers the following:
• Causes of the breach and vulnerabilities.
• Vulnerability and susceptibility to cyber-crime of the ICT infrastructure within the department
• Lack of staff capacity and weak ICT systems
“I welcome the precautionary suspension of four individuals including senior managers and the seizure of over 30 laptops for further examination by the investigative teams,” said Minister Dean Macpherson.
“This will allow the investigations to proceed smoothly. We are appealing to the team probing this security breach to conclude their investigation with speed.
“We do not want prolonged investigations with no results and consequences. There is simply no place for corruption in this department.”
Minister Macpherson added: “I further welcome the initial swift investigation launched by my predecessor and now Deputy Minister Zikalala.
“The department has suffered a massive financial loss and those responsible for protecting us from cyber criminals must be held to account.
“We need answers as to what happened under their watch.
“We also ask the investigators to trace and follow the money and ensure that it is brought back to the coffers of government.”
The minister said he was committed to working tirelessly to reinforce cyber security systems within the department to prevent such incidents in the future.
