Eskom has confirmed that there were no new or emerging breaches of its Online Vending System (OVS), following decisive actions taken to curb OVS fraud, secure systems, protect revenue, and safeguard customers. The issue was first fully disclosed in Eskom’s 2024 Annual Results published in December 2024. Eskom at the time said it had taken decisive action to strengthen its systems and restore public confidencefollowing the disclosure in its full-year 2024 financial results of a forensic report detailing the breach of its OVS.
The power utility said the system was exploited to generate and distribute fraudulent prepaid electricity tokens, revealing critical vulnerabilities in both the physical and cybersecurity components of its prepaid electricity infrastructure. Eskom spokesperson Daphne Mokwena said two comprehensive updates on the matter were already provided on 02 July 2025. The utility said it undertook a comprehensive review and intervention strategy in July to mitigate these vulnerabilities and restore system integrity.
“Therefore, any assertions by recent media reports that Eskom did not respond to a question regarding the OVS are inaccurate. “As the investigation into the OVS breach continues with law enforcement, and vending fraud is now reduced to very low levels, Eskom is proving that stronger systems, smarter technology, and decisive action are protecting revenue and ensuring secure, reliable electricity for all South Africans,” Eskom said. In a progress update on 18 September 2025, Eskom said it had implemented key actions as part of a multi-layered approach to strengthen physical security, cyber resilience, and operational controls.
Read Full Article on The Citizen
[paywall]
Mokwena said expanded investigative measures, conducted in collaboration with law enforcement, have been concluded for some of the implicated employees. “Certain elements have been referred to the authorities, and the company will cooperate fully.
[/paywall]
