By Marcus Moloko
The Gauteng provincial government has launched an investigation into allegations of a suspected breach of government information.
Provincial government has confirmed it is investigating a suspected information breach after claims surfaced that a massive database containing government-related files was stolen and put up for sale online.
The incident came to light on 13 March 2026, when a threat actor group calling itself XP95 posted on an online forum and Telegram channel, alleging that it had extracted sensitive government data.
ALSO READ: Suspended cop tells ad hoc committee Mkhwanazi took part in torture
According to the group, the stolen material amounts to 3.8 terabytes of data, comprising 3,673,556 individual files, and is being offered for $25,000 (approximately R420,000).
Preliminary indications suggest that the compromised files include information from individuals who had sought employment with the provincial government.
Gauteng Premier Panyaza Lesufi has acknowledged the seriousness of the matter, confirming that ongoing probes are underway to establish the validity and full extent of the breach.
ALSO READ: I never knew Matlala was part of Big 5, Shibiri tells commission
Lesufi emphasized that speculation at this stage would be premature, but assured the public that internal security protocols have been activated and relevant law enforcement and cybersecurity authorities are engaged.
Government spokesperson Elijah Mhlanga reinforced this position, noting that the investigation is being treated with urgency and that further communication will be provided once more facts are established.
