11
Ekurhuleni scandal: Hackers beat government
A System So Broken, Even Criminals Could Walk Right In
There is something deeply telling about the City of Ekurhuleni’s billing scandal that goes far beyond the numbers. Something that makes you stop, put the article down, and just sit with the discomfort of it all. Hackers — sitting in vehicles parked outside a licensing department in Bedfordview, connected to unprotected government Wi-Fi and walked straight into the heart of the municipality’s billing infrastructure. No force. No elaborate breach. Just an open door that nobody in a position of authority had bothered to close.
The system that was supposed to hold residents accountable for their debt was so neglected, so poorly managed, so wide open, that criminals moved through it like they owned it. Because, for a long time, they essentially did.
Two Billion Rand and a Municipality on Its Knees
The Parliamentary Standing Committee on Public Accounts has now confirmed what investigators have been piecing together for months. Cybercriminals infiltrated the City of Ekurhuleni’s billing system, known as SOLAR, and over an extended period, stole an estimated two billion rand from the municipality.
Two billion rand. That is not a rounding error. That is not a clerical mistake. That is a deliberate, organised, sustained theft from a city that is already drowning in thirty-seven and a half billion rand in outstanding consumer debt, with more than eighty percent of that debt older than ninety days.
Residents are being told their bills are too high, services are being cut, tariffs are going up and all the while, a criminal syndicate was sitting in a parking lot, quietly deleting what people owed and paying themselves with public money.
Inside the Operation: Insiders, Conveyancers and a Spy Device
This was not the work of a lone genius sitting in a dark room. The forensic report compiled by OMA Chartered Accountants in July 2025 lays out something far more chilling; a network. Municipal insiders. Conveyancers. People who knew exactly how the system worked because they worked inside it every single day.
They funnelled payments of roughly forty thousand rand per transaction to so-called billing solution providers, who would then alter and delete back-end billing records to make debts disappear. Rates clearance certificates were issued fraudulently, allowing properties to be transferred without the actual debt being settled.
A spy device was planted. The former municipal manager’s laptop was compromised. This was organised crime operating with the confidence of people who believed — correctly, for a very long time that nobody was watching.
The Death That Cannot Be Ignored
There is one detail in this story that should make every South African sit up straight. Municipal forensic audit official Mpho Mafole was allegedly investigating these very missing funds when he was murdered.
His death has now been dragged back into the spotlight by this scandal, and the question hanging in the air is one that nobody in power seems in a rush to answer: was Mpho Mafole killed because he was getting too close?
South Africa has a brutal pattern of people who try to hold the powerful accountable ending up dead or discredited. Babita Deokaran. Many others whose names never even made the front page. When whistleblowers and investigators are being buried, it tells you everything you need to know about how deeply this rot has set in.
The People Who Pay the Price Are Always the Same People
Here is what this scandal looks like from the ground. It looks like a grandmother in Tembisa who has been paying her electricity bill faithfully for thirty years being told the municipality cannot fix the pothole outside her house because there are no funds.
It looks like a young family in Katlehong receiving a water bill so inflated it makes no sense, while somewhere in the system a criminal is deleting someone else’s debt entirely. The City of Ekurhuleni’s collection rate is stuck at eighty-five percent, well below the ninety percent target — and officials want to blame residents for not paying.
But how can you ask people to trust a billing system that has been proven to be entirely compromised? The ones who always end up carrying the weight of government failure are the ordinary people. The residents. The workers. The ones who cannot afford a lawyer or a connection.
A Digital State of Emergency Built on Years of Neglect
The City of Ekurhuleni called this a digital state of emergency. But emergencies do not appear out of thin air. The forensic report found that internal collusion and poor information technology controls made these attacks not just possible, but almost inevitable.
This was not a sophisticated zero-day exploit carried out by elite international cybercriminals. This was a syndicate that exploited unprotected Wi-Fi at a licensing department. Unprotected. Government Wi-Fi. In 2025. This is what years of cadre deployment, incompetent appointments and a culture of zero accountability produces. Not bad luck. Not external forces beyond anyone’s control.
A predictable collapse, foreseen by nobody who was paid to foresee it.
Justice Must Be More Than a Press Conference
The Hawks are now investigating. The Democratic Alliance has written to the President requesting a Special Investigating Unit probe. Parliament’s Standing Committee on Public Accounts has had its hearing. Good. All of that is good. But South Africans have watched this play before, and they know how it usually ends — with a few headlines, a strongly worded statement, and then a slow quiet fade back to business as usual.
What this moment demands is something different. It demands that the names of every implicated official, contractor, and political figure be made public. It demands that the criminal prosecution move at a pace that respects the gravity of what happened. It demands that Mpho Mafole’s death be investigated with the same urgency.
And it demands that the residents of Ekurhuleni — who have endured potholes, water cuts, inflated bills, and now this — finally get a government that is as organised and determined as the criminals who just stole two billion rand from them.
