Eskom praises online vending breach containment, but cost of fraud and weaknesses still loom

By Johnathan Paoli

Eskom says it has drastically reduced fraud linked to its Online Vending System (OVS), but the financial and reputational cost of the breach is still being counted.

The embattled power utility first disclosed the breach in its 2024 financial results, where insiders quietly admitted that revenue losses had been “material” and confidence in prepaid systems had been shaken.

“Earlier this year, Eskom strengthened the protection of its systems against potential threats. All enhancements are managed through a robust Change Management process across all divisions, ensuring consistent oversight and control. These measures are part of our ongoing commitment to safeguarding operations,” Eskom’s Chief Technology and Information Officer, Len De Villiers said.

The breach allowed fraudulent electricity vending, with tokens being illicitly generated or manipulated.

Though Eskom has not yet put a rand figure to the losses, industry analysts say the scale could run into hundreds of millions, given