Eskom confirms no new or emerging breaches to the Online Vending System (OVS), following decisive actions taken to curb OVS fraud, secure systems, protect revenue, and safeguard customers

Wednesday, 07 January 2026: Eskom wishes to reassure the public that there are no new issues regarding the Online Vending System (OVS) breach. This issue was first fully disclosed in Eskom’s 2024 Annual Results published in December 2024.

Two comprehensive updates have already been provided on the matter, on 02 July 2025 [Eskom continues to strengthen security systems and oversight of its Online Vending System] and on 18 September 2025 [Eskom reports major gains in containing Online Vending System breach amid ongoing investigation], in addition to a detailed response by Eskom Group Chief Executive, Dan Marokane, to a media question during the 2025 Financial Annual Results Announcement held at Megawatt Park on 30 September 2025.

Therefore, any assertions by recent media reports that Eskom did not respond to a question regarding the OVS are inaccurate.

As part of Eskom’s turnaround strategy, we remain committed to being transparent with the South African public and working with the media to ensure that the facts are always well-presented.

This level of collaboration will ensure that we do not raise unnecessary alarms and resist the urge to recycle and present old news as new.

A recap of the official updates provided on the OVS matter

Following the initial discovery, Eskom implemented a comprehensive review and intervention strategy to mitigate vulnerabilities and restore system integrity. Decisive actions were taken to curb OVS fraud, secure systems, protect revenue, and safeguard customers.

As stated in the progress update provided on 18 September 2025, key actions implemented as part of a multi-layered approach strengthening physical security, cyber resilience, and operational controls, include:

• Tighter physical access controls to secure vending environments.
• Enhanced cybersecurity tools and monitoring to prevent unauthorised access.
• Stronger user-access controls with weekly dashboards flagging irregularities.
• Expanded investigative measures, conducted in collaboration with law enforcement, have been concluded for some of the implicated employees (and are underway for all implicated employees), with the internal process resulting in their dismissal. Certain elements have been referred to the authorities, and the company will cooperate fully.
• Deployment of detection tools to highlight risk areas and enable early intervention.
• Rollout of smart meters and reconciliation methods to validate fraud levels monthly.
• Acceleration of a new, secure vending platform to replace the current OVS.

As the investigation into the OVS breach continues with law enforcement, and vending fraud is now reduced to very low levels, Eskom is proving that stronger systems, smarter technology, and decisive action are protecting revenue and ensuring secure, reliable electricity for all South Africans.

ENDS