Ekurhuleni Metropolitan Municipality, South Africa's third-largest metro, has become the epicenter of what investigators are calling one of the nation's most sophisticated municipal corruption scandals—a R2 billion fraud scheme enabled by catastrophic cybersecurity failures and insider complicity.
A forensic report by OMA Chartered Accountants, detailed by TimesLive, reveals how cybercriminals systematically compromised the municipality's SOLAR billing system to manipulate property debts, issue fraudulent rates-clearance certificates, and enable unlawful property transfers.
The breach's mechanics illustrate institutional rot at multiple levels. A former security consultant, Lucas Mhlonishwa Dhlamini, physically infiltrated municipal offices and connected a spy laptop containing malware, keylogging scripts, and remote-access tools to servers at the Kempton Park Customer Care Centre. The device also compromised the personal computer of former city manager Imogen Mashazi.
But the cyberattack succeeded primarily because Ekurhuleni's IT infrastructure was already fundamentally compromised. Forensic auditors discovered more than 60 shared administrator accounts across key servers—eliminating individual accountability and creating what one source described as "a fraudster's paradise." There were no audit trails for critical back-end record changes, meaning billing modifications could be made and erased without detection.
The municipality also failed to implement segregation of duties, allowing the same users to create, approve, and alter billing transactions. Despite repeated removal attempts, keylogging software persisted on municipal systems, harvesting credentials and administrative passwords.
The fraud scheme operated through a sophisticated network: municipal insiders and conveyancers paid approximately to who manipulated the SOLAR system. This enabled illegal reduction of property debts owed to the city, fraudulent issuance of rates-clearance certificates, and unlawful fast-tracking of property transfers despite outstanding municipal debt.




