eFinder

eFinder

How cybercriminals hacked Ekurhuleni’s IT system to steal R2bn

Cybercrime and Corruption Municipal Governance Failure

psychologyDetected Techniques

warning
Loaded Language 95% confidence
Using words with strong emotional connotations to influence an audience.
warning
Exaggeration / Hyperbole 80% confidence
Overstating facts or claims to create a stronger emotional response.

fact_checkFact-Check Results

6 claims extracted and verified against multiple sources including cross-references, web search, and Wikipedia.

check_circle Corroborated 5
info Single Source 1
check_circle
“A brazen takeover by a cybercrime syndicate saw Ekurhuleni’s IT billing system effectively seized”
CORROBORATED
The claim is reported by two independent news sources, Theherald and Sowetan.
compare_arrows
cross reference SUPPORTS — A brazen takeover by a cybercrime syndicate saw Ekurhuleni’s IT billing system effectively seized
https://www.sowetan.co.za/news/2026-05-10-how-cybercriminals…
compare_arrows
cross reference SUPPORTS — A brazen takeover by a cybercrime syndicate saw Ekurhuleni’s IT billing system effectively seized
https://www.theherald.co.za/news/2026-05-10-how-cybercrimina…
check_circle
“former municipal manager Imogen Mashazi’s laptop hacked”
CORROBORATED
The claim is reported by three independent news sources: Theherald, Sowetan, and Timeslive.
compare_arrows
cross reference SUPPORTS — former municipal manager Imogen Mashazi’s laptop hacked
https://www.theherald.co.za/news/2026-05-10-how-cybercrimina…
compare_arrows
cross reference SUPPORTS — former municipal manager Imogen Mashazi’s laptop hacked
https://www.sowetan.co.za/news/2026-05-10-how-cybercriminals…
compare_arrows
cross reference SUPPORTS — A brazen takeover by a cybercrime syndicate saw Ekurhuleni’s IT billing system effectively seized, former municipal manager Imogen Mashazi’s laptop hacked, and a covert spy device deployed — fuelling …
https://timeslive.co.za/news/2026-05-09-how-cybercriminals-h…
check_circle
“a covert spy device deployed — fuelling a shadowy operation investigators say enabled a staggering R2bn fraud”
CORROBORATED
The claim regarding the spy device and R2bn fraud is reported by three independent news sources: Sowetan, Theherald, and Timeslive.
compare_arrows
cross reference SUPPORTS — a covert spy device deployed — fuelling a shadowy operation investigators say enabled a staggering R2bn fraud
https://www.theherald.co.za/news/2026-05-10-how-cybercrimina…
compare_arrows
cross reference SUPPORTS — a covert spy device deployed — fuelling a shadowy operation investigators say enabled a staggering R2bn fraud
https://www.sowetan.co.za/news/2026-05-10-how-cybercriminals…
compare_arrows
cross reference SUPPORTS — A brazen takeover by a cybercrime syndicate saw Ekurhuleni’s IT billing system effectively seized, former municipal manager Imogen Mashazi’s laptop hacked, and a covert spy device deployed — fuelling …
https://timeslive.co.za/news/2026-05-09-how-cybercriminals-h…
check_circle
“The full extent of the unprecedented breach is set out in a forensic report compiled by OMA Chartered Accountants in July 2025”
CORROBORATED
The existence of the forensic report by OMA Chartered Accountants in July 2025 is reported by three independent news sources: Timeslive, Sowetan, and Theherald.
compare_arrows
cross reference SUPPORTS — The full extent of the unprecedented breach is set out in a forensic report compiled by OMA Chartered Accountants in July 2025
https://www.sowetan.co.za/news/2026-05-10-how-cybercriminals…
compare_arrows
cross reference SUPPORTS — The full extent of the unprecedented breach is set out in a forensic report compiled by OMA Chartered Accountants in July 2025
https://timeslive.co.za/news/2026-05-09-how-cybercriminals-h…
compare_arrows
cross reference SUPPORTS — The full extent of the unprecedented breach is set out in a forensic report compiled by OMA Chartered Accountants in July 2025
https://www.theherald.co.za/news/2026-05-10-how-cybercrimina…
info
“the syndicate systematically infiltrated and took control of the municipality’s IT billing infrastructure, known as SOLAR”
SINGLE SOURCE
While a web search result mentions the syndicate taking control of the billing infrastructure, the specific name 'SOLAR' is not corroborated by multiple independent news organizations in the provided evidence set.
travel_explore
web search NEUTRAL — The full extent of the unprecedented breach is set out in a forensic report compiled by OMA Chartered Accountants in July 2025, detailing how the syndicate systematically infiltrated and took control …
https://www.sundaytimes.timeslive.co.za/news/2026-05-09-how-…
travel_explore
web search NEUTRAL — Ekurhuleni is one of the five districts of Gauteng and one of the eight metropolitan municipalities of South Africa.
https://en.wikipedia.org/wiki/City_of_Ekurhuleni_Metropolita…
travel_explore
web search NEUTRAL — The site owner hides the web page description.
https://www.ekurhuleni.gov.za/departments/3-2/energy/
check_circle
“a network of municipal insiders and conveyancers colluded by funnelling payments of about R40,000 per transaction to “billing solution providers” to orchestrate the manipulation and deletion of municipal debt records”
CORROBORATED
The specific details regarding the R40,000 payments and collusion between insiders and conveyancers are reported by three independent news sources: Timeslive, Sowetan, and Theherald.
compare_arrows
cross reference SUPPORTS — a network of municipal insiders and conveyancers colluded by funnelling payments of about R40,000 per transaction to “billing solution providers” to orchestrate the manipulation and deletion of munici…
https://www.theherald.co.za/news/2026-05-10-how-cybercrimina…
compare_arrows
cross reference SUPPORTS — a network of municipal insiders and conveyancers colluded by funnelling payments of about R40,000 per transaction to “billing solution providers” to orchestrate the manipulation and deletion of munici…
https://www.sowetan.co.za/news/2026-05-10-how-cybercriminals…
compare_arrows
cross reference SUPPORTS — a network of municipal insiders and conveyancers colluded by funnelling payments of about R40,000 per transaction to “billing solution providers” to orchestrate the manipulation and deletion of munici…
https://timeslive.co.za/news/2026-05-09-how-cybercriminals-h…

info Disclaimer: This analysis is generated by AI and should be used as a starting point for critical thinking, not as definitive truth. Claims are verified against publicly available sources. Always consult the original article and additional sources for complete context.