Cyber criminals steal R300m from public works department

The Department of Public Works and Infrastructure (DPWI) Minister Dean Macpherson has decided to take the public into his confidence in the interests of transparency to reveal a staggering cybercrime that involves R300-million being stolen in the past 10 years.

In the latest incident that took place in May 2024, the cyber-attackers stole a further R24-million.

This prompted a full forensic investigation by the Hawks. Also by the South African Police Services(SAPS), the State Security Agency (SSA) and experts in the ICT and cyber security industries.

Detailed assessment by incoming minister and his deputy

This revelation emerged as Macpherson and Deputy Minister Sihle Zikalala conducted detailed assessments on the work of the department. Also through the incoming briefings from departmental branches.

“It has become clear that the department has been a soft target and playground for cyber criminals for over a 10-year period. This should have been picked up a lot earlier. I felt it was important to let South Africa know what has happened. And what we are doing about it,” Macpherson said.

“I cannot discount the possibility of collusion between officials and criminals in this prolonged period of theft. It is clear that we need better financial controls. Which I have said to the department are a matter of urgency,” said Macpherson.

He pledged to crack down on these syndicates and those in cahoots with them. Either internally or externally. 

“We want to put a stop to this immediately. Because we cannot allow our department to be subjected to unchecked looting. This is money that could have been spent on our infrastructure drive to improve the lives of South Africans. 

“The investigation will be expanded … to find the masterminds and the beneficiaries of this grand theft. And I want to see them in prison,” Macpherson said. 

Suspensions and seizures

Four DPWI officials have been suspended and 30 laptops seized by the investigators.  They include three senior management officials and one middle management official.


The department was forced to shut down all its payment systems. This caused significant delays in the payment of its creditors.

In May, the department announced that it had ordered a full forensic probe into what it called vulnerabilities. These were in the department’s information and technology systems.

The department identified the cyber-security vulnerabilities with the assistance of its banking partners. These include ABSA and the South African Reserve Bank.

The investigation, which involves cyber and ICT security experts, covers the following:

-Causes of the breach and vulnerabilities;
-Vulnerability and susceptibility to cyber-crime of the ICT infrastructure within the department; and
-Lack of staff capacity and weak ICT systems.

“I welcome the precautionary suspension of four individuals, including senior managers. And the seizure of over 30 laptops for further examination by the investigative teams. This will allow the investigations to proceed smoothly.

“We are appealing to the team probing this security breach to conclude their investigation with speed. Not a prolonged investigations with no results or consequences. There is simply no place for corruption in this department,” Macpherson said.

“I further welcome the initial swift investigation launched by my predecessor and now Deputy Minister Zikalala. The department has suffered a massive financial loss. And those responsible for protecting us from cyber criminals must be held to account. 

Follow the money and recoup it

“We need answers as to what happened under their watch.  We also ask the investigators to trace and follow the money. And ensure that it is brought back to the coffers of the government,” said Macpherson.

The minister has committed himself to work tirelessly. This to ensure the reinforcement of the cyber security systems within the department. The aim is so that similar incidents are prevented in future.

  • SAnews.gov.za

Visit SW YouTube Channel for our video content

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Latest News