Eskom boosts security following prepaid electricity token scam

Eskom has introduced strict new measures to strengthen its digital and physical security after a breach in its Online Vending System (OVS) enabled the issuance of fraudulent prepaid electricity tokens.

The power utility announced the update on Wednesday as part of its efforts to rebuild public trust and address the serious vulnerabilities exposed by the incident.

“We are fully aware of the challenges that have emerged within the OVS environment,” said Eskom CEO Dan Marokane.

“We have taken clear steps to address them.”

A forensic report released last year revealed that individuals had manipulated the system to create and distribute fake prepaid electricity tokens. The breach sparked concern over weaknesses in both the physical and cybersecurity aspects of Eskom’s prepaid electricity platform.

Eskom: Focus on system overhaul and accountability

Marokane stressed that Eskom’s response goes beyond a technical repair.

“Our focus is on restoring trust, strengthening our systems, and ensuring that our customers can rely on a secure and efficient service,” he said.

“This is not just a technical fix, it is part of a broader commitment to transparency, operational excellence and accountability.”

Eskom has rolled out several internal controls to prevent future incidents. These include measures to restrict digital and physical access to key systems and reinforced infrastructure to better guard against tampering.

Investigations Underway, New System Coming

Eskom confirmed that it has placed several employees linked to the breach on precautionary suspension while the investigation continues. The utility is also collaborating with law enforcement to pursue criminal charges where necessary.

“[We are] accelerating the acquisition of a new, secure vending system,” said Marokane.

“It’s designed to replace the current OVS and prevent future incidents.”