fullscreen

eFinder

eFinder

Home › Cybercrime and Corruption › Article

How cybercriminals hacked Ekurhuleni’s IT system to steal R2bn

Dailydispatch · · 127 words · By Sipho Masondo
Cybercrime and Corruption Municipal Governance Failure
headphones Listen to the eFinder podcast briefing
Generate a natural audio summary of this story
Daily briefing

What to know about Cybercrime and Corruption

A brazen takeover by a cybercrime syndicate saw Ekurhuleni’s IT billing system effectively seized, former municipal manager Imogen Mashazi’s laptop hacked, and a covert spy device deployed — fuelling a shadowy operation investigators say enabled a staggering…

Claims checked 6
Techniques found 2
Topics 2

Coverage spectrum

Coverage gap: Low Left coverage
Left0%
Center83%
Right17%

6 sources compared across this story cluster. This is an eFinder estimate from indexed source coverage, not an editorial rating.

What happened

A brazen takeover by a cybercrime syndicate saw Ekurhuleni’s IT billing system effectively seized, former municipal manager Imogen Mashazi’s laptop hacked, and a covert spy device deployed — fuelling a shadowy operation investigators say enabled a staggering…

Why it matters

The full extent of the unprecedented breach is set out in a forensic report compiled by OMA Chartered Accountants in July 2025, detailing how the syndicate systematically infiltrated and took control of the municipality’s IT billing infrastructure, known as…

Common ground

According to the report, a network of municipal insiders and conveyancers colluded by funnelling payments of about R40,000 per transaction to “billing solution providers” to orchestrate the manipulation and deletion of municipal debt records, creating the…

Perspective signals

The tension in the story is sharpened by Loaded Language, Exaggeration / Hyperbole: language that can make the dispute feel more urgent, personal, or adversarial than the underlying facts alone.

open_in_new Read the original article: https://www.dailydispatch.co.za/news/2026-05-10-how-cybercriminals-hacked-ekurhu…

psychologyPropaganda Techniques Detected

eFinder identified 2 propaganda techniques in this article. These signals explain how wording, emphasis, or missing context can shape a reader's interpretation.

warning
Loaded Language 95% confidence
Using words with strong emotional connotations to influence an audience.
Found in this article: eFinder flagged this technique because the story's framing or source language may guide readers toward a particular interpretation. Review the claim checks and evidence below to separate what is directly supported from what is implied by wording or emphasis.
Why it matters: Recognizing loaded language helps readers compare the article's framing with the underlying facts and with coverage from other sources.
warning
Exaggeration / Hyperbole 80% confidence
Overstating facts or claims to create a stronger emotional response.
Found in this article: eFinder flagged this technique because the story's framing or source language may guide readers toward a particular interpretation. Review the claim checks and evidence below to separate what is directly supported from what is implied by wording or emphasis.
Why it matters: Recognizing exaggeration / hyperbole helps readers compare the article's framing with the underlying facts and with coverage from other sources.

fact_checkClaims Checked

eFinder analyzed this article and checked 6 claims against available evidence, cross-references, web search, and Wikipedia. Here is what the fact-checking layer found.

check_circle Corroborated 5
info Single Source 1
check_circle
Claim 1: “a covert spy device deployed — fuelling a shadowy operation investigators say enabled a staggering R2bn fraud”
CORROBORATED
The claim regarding the spy device and R2bn fraud is reported by three independent news sources: Sowetan, Theherald, and Timeslive.
compare_arrows
cross reference SUPPORTS — a covert spy device deployed — fuelling a shadowy operation investigators say enabled a staggering R2bn fraud
https://www.theherald.co.za/news/2026-05-10-how-cybercrimina…
compare_arrows
cross reference SUPPORTS — a covert spy device deployed — fuelling a shadowy operation investigators say enabled a staggering R2bn fraud
https://www.sowetan.co.za/news/2026-05-10-how-cybercriminals…
compare_arrows
cross reference SUPPORTS — A brazen takeover by a cybercrime syndicate saw Ekurhuleni’s IT billing system effectively seized, former municipal manager Imogen Mashazi’s laptop hacked, and a covert spy device deployed — fuelling …
https://timeslive.co.za/news/2026-05-09-how-cybercriminals-h…
check_circle
Claim 2: “a network of municipal insiders and conveyancers colluded by funnelling payments of about R40,000 per transaction to “billing solution providers” to orchestrate the manipulation and deletion of municipal debt records”
CORROBORATED
The specific details regarding the R40,000 payments and collusion between insiders and conveyancers are reported by three independent news sources: Timeslive, Sowetan, and Theherald.
compare_arrows
cross reference SUPPORTS — a network of municipal insiders and conveyancers colluded by funnelling payments of about R40,000 per transaction to “billing solution providers” to orchestrate the manipulation and deletion of munici…
https://www.theherald.co.za/news/2026-05-10-how-cybercrimina…
compare_arrows
cross reference SUPPORTS — a network of municipal insiders and conveyancers colluded by funnelling payments of about R40,000 per transaction to “billing solution providers” to orchestrate the manipulation and deletion of munici…
https://www.sowetan.co.za/news/2026-05-10-how-cybercriminals…
compare_arrows
cross reference SUPPORTS — a network of municipal insiders and conveyancers colluded by funnelling payments of about R40,000 per transaction to “billing solution providers” to orchestrate the manipulation and deletion of munici…
https://timeslive.co.za/news/2026-05-09-how-cybercriminals-h…
info
Claim 3: “the syndicate systematically infiltrated and took control of the municipality’s IT billing infrastructure, known as SOLAR”
SINGLE SOURCE
While a web search result mentions the syndicate taking control of the billing infrastructure, the specific name 'SOLAR' is not corroborated by multiple independent news organizations in the provided evidence set.
travel_explore
web search NEUTRAL — The full extent of the unprecedented breach is set out in a forensic report compiled by OMA Chartered Accountants in July 2025, detailing how the syndicate systematically infiltrated and took control …
https://www.sundaytimes.timeslive.co.za/news/2026-05-09-how-…
travel_explore
web search NEUTRAL — Ekurhuleni is one of the five districts of Gauteng and one of the eight metropolitan municipalities of South Africa.
https://en.wikipedia.org/wiki/City_of_Ekurhuleni_Metropolita…
travel_explore
web search NEUTRAL — The site owner hides the web page description.
https://www.ekurhuleni.gov.za/departments/3-2/energy/
check_circle
Claim 4: “former municipal manager Imogen Mashazi’s laptop hacked”
CORROBORATED
The claim is reported by three independent news sources: Theherald, Sowetan, and Timeslive.
compare_arrows
cross reference SUPPORTS — former municipal manager Imogen Mashazi’s laptop hacked
https://www.theherald.co.za/news/2026-05-10-how-cybercrimina…
compare_arrows
cross reference SUPPORTS — former municipal manager Imogen Mashazi’s laptop hacked
https://www.sowetan.co.za/news/2026-05-10-how-cybercriminals…
compare_arrows
cross reference SUPPORTS — A brazen takeover by a cybercrime syndicate saw Ekurhuleni’s IT billing system effectively seized, former municipal manager Imogen Mashazi’s laptop hacked, and a covert spy device deployed — fuelling …
https://timeslive.co.za/news/2026-05-09-how-cybercriminals-h…
check_circle
Claim 5: “A brazen takeover by a cybercrime syndicate saw Ekurhuleni’s IT billing system effectively seized”
CORROBORATED
The claim is reported by two independent news sources, Theherald and Sowetan.
compare_arrows
cross reference SUPPORTS — A brazen takeover by a cybercrime syndicate saw Ekurhuleni’s IT billing system effectively seized
https://www.sowetan.co.za/news/2026-05-10-how-cybercriminals…
compare_arrows
cross reference SUPPORTS — A brazen takeover by a cybercrime syndicate saw Ekurhuleni’s IT billing system effectively seized
https://www.theherald.co.za/news/2026-05-10-how-cybercrimina…
check_circle
Claim 6: “The full extent of the unprecedented breach is set out in a forensic report compiled by OMA Chartered Accountants in July 2025”
CORROBORATED
The existence of the forensic report by OMA Chartered Accountants in July 2025 is reported by three independent news sources: Timeslive, Sowetan, and Theherald.
compare_arrows
cross reference SUPPORTS — The full extent of the unprecedented breach is set out in a forensic report compiled by OMA Chartered Accountants in July 2025
https://www.sowetan.co.za/news/2026-05-10-how-cybercriminals…
compare_arrows
cross reference SUPPORTS — The full extent of the unprecedented breach is set out in a forensic report compiled by OMA Chartered Accountants in July 2025
https://timeslive.co.za/news/2026-05-09-how-cybercriminals-h…
compare_arrows
cross reference SUPPORTS — The full extent of the unprecedented breach is set out in a forensic report compiled by OMA Chartered Accountants in July 2025
https://www.theherald.co.za/news/2026-05-10-how-cybercrimina…
info Disclaimer: This analysis is generated by AI and should be used as a starting point for critical thinking, not as definitive truth. Claims are verified against publicly available sources. Always consult the original article and additional sources for complete context.