In a shocking revelation, cyber criminals looted R300 million from the Department of Public Works and Infrastructure (DPWI) over a span of ten years. This disclosure was made by Dean Macpherson, the current minister of public works and infrastructure, highlighting the need for transparency and robust cyber security measures within government operations.
The Extent of the Cyber Crime
Over the past decade, the DPWI has fallen victim to a series of cyber attacks resulting in a cumulative theft of at least R300 million. This staggering amount underscores the severe impact of cyber crime on government resources and the importance of safeguarding public funds.
Key Figures Involved
Dean Macpherson, the minister of public works and infrastructure, has brought this issue to light, emphasizing the department’s commitment to transparency. Other notable figures who have overseen the department include Sihle Zikalala, Patricia de Lille, and Thulas Nxesi. Each has played a role in the ongoing efforts to secure the department’s infrastructure.
Recent Developments
The latest incident occurred in May, when cyber attackers managed to steal an additional R24 million. This prompted an immediate and comprehensive forensic investigation involving various agencies and cyber security experts to address the breach and prevent further losses.

Team Engineers with draft plan of building on constructing site. Engineer work on site. engineer visit and inspection site engineer. Inspector engineer check and working on site.
Forensic Investigation
The investigation into the cyber breach has enlisted the expertise of the Hawks, South African Police Services, the State Security Agency, and ICT and cyber security specialists. This collaborative effort aims to uncover the full extent of the breach, identify vulnerabilities, and hold those responsible accountable.
Details of the Cyber Breach
The investigation has revealed significant vulnerabilities within the department’s ICT infrastructure. With the help of banking partners like Absa and the South African Reserve Bank, the department identified critical weaknesses that had been exploited by cyber criminals over the years.
Suspension and Seizure
In response to the breach, four officials, including three senior management and one middle management official, have been suspended. Additionally, 30 laptops have been seized to aid in the investigation, ensuring that all possible leads are thoroughly examined.
Impact on Operations
The cyber attack forced the department to shut down its payment system, leading to significant delays in settling payments with creditors. This disruption highlights the broader operational impact of cyber crime on government functions and the urgency of resolving the vulnerabilities.
Statements from the Minister
Minister Macpherson has been vocal about the need for transparency and improved financial controls within the department. He has pledged to crack down on both internal and external actors involved in the theft, stressing the importance of protecting public funds from unchecked looting.
Collusion Concerns
One of the most troubling aspects of the breach is the potential collusion between department officials and cyber criminals. Macpherson has not ruled out this possibility and has emphasized the need for stringent measures to prevent such collusion in the future.
Importance of Cyber Security
The incident underscores the critical need for robust cyber security measures within government departments. The involvement of ICT and cyber security experts is essential in identifying and addressing vulnerabilities, ensuring that similar incidents are prevented in the future.
Government’s Response
Previous ministers, including Sihle Zikalala, have also taken steps to address cyber security issues within the department. The current administration continues to build on these efforts, implementing more stringent controls and expanding the scope of the investigation.
Future Prevention
Looking ahead, the department is committed to strengthening its cyber security systems to safeguard public funds. This involves long-term planning and the implementation of advanced security measures to protect against future cyber threats.
Conclusion
The revelation of a decade-long cyber theft from the DPWI highlights the urgent need for improved cyber security and transparency within government operations. As investigations continue and measures are put in place, it is crucial to ensure that public funds are protected and that those responsible are held accountable.
Don’t risk your data, infrastructure or reputation. Get in touch with Fortress Cyber Solutions today to protect your brand.
FAQs
What triggered the investigation into the DPWI? The investigation was triggered by a series of cyber thefts, the latest of which involved the theft of R24 million in May.
How much has been recovered so far? The exact amount recovered is still being determined as investigations continue.
What are the key vulnerabilities identified? The investigation has identified significant weaknesses in the department’s ICT infrastructure and financial controls.
How is the government ensuring this doesn’t happen again? The government is implementing more stringent cyber security measures and financial controls to prevent future incidents.
What role do banking partners play in cyber security? Banking partners like Absa and the South African Reserve Bank have assisted in identifying vulnerabilities and enhancing the department’s cyber security.