Johannesburg: State power utility Eskom says it has taken several steps to strengthen its systems against potential threats related to the generation of fraudulent prepaid tokens.
According to South African Government News Agency, in December 2024, the power utility disclosed, as part of its full-year 2024 financial results, a forensic report detailing the breach of its Online Vending System (OVS). The system was exploited to generate and distribute fraudulent prepaid electricity tokens, revealing critical vulnerabilities in both the physical and cybersecurity components of the utility’s prepaid electricity infrastructure.
In response, Eskom undertook a comprehensive review and intervention strategy aimed at mitigating these vulnerabilities and restoring system integrity. Eskom Chief Technology and Information Officer, Len De Villiers, stated that the power utility has successfully strengthened the protection of its current systems against potential threats. All system enhancements are managed through a robust Change Management process that spans all divisions, ensuring consistent oversight and control. These measures are part of Eskom’s ongoing commitment to safeguarding operations and addressing identified vulnerabilities.
The latest key actions implemented include internal controls to deal with electricity theft, safeguarding measures to reinforce physical infrastructure, and enhance monitoring capabilities. There is ongoing collaboration with law enforcement agencies to support investigations and ensure accountability. Internal employees implicated in the fraud have been placed on precautionary suspension pending further review. Eskom has also augmented in-house capabilities with support from an external IT firm to better manage risks and safeguard operations. The utility has coordinated system upgrades through a structured change management process and maintains regular reporting to the Eskom Board, which has oversight of the remediation process.
Eskom has accelerated the acquisition of a new, secure vending system designed to replace the current OVS and prevent future incidents. Eskom Group Chief Executive, Dan Marokane, emphasized the steps taken to address the challenges within the OVS environment, focusing on restoring trust and ensuring a secure service for customers. Eskom, in conjunction with law enforcement, is investigating with the findings to be disclosed once complete.