CyberSecurity News

In 2024, South Africa’s public sector experienced a significant escalation in cyberattacks, severely disrupting critical infrastructure across numerous state entities. These incidents highlight the critical need for comprehensive cybersecurity solutions like StormWarning! to assist organizations in identifying vulnerabilities in their policies, staff practices, and digital defenses, while strengthening their cybersecurity posture through tailored solutions and staff training.

A Worrying Trend

The year began with alarming insights from Orange Cyberdefense’s senior security researcher, Wicus Ross, who revealed a 107% increase in cyber extortion victims in South Africa from Q2 2023 to Q1 2024. “For the period analysed, Africa saw the second-highest increase globally as a percentage,” Ross stated.

Adding to these concerns, Allianz’s 2024 cybersecurity report ranked South Africa 14th among the countries most affected by data breaches, with an average recovery cost of R49 million per incident. Such breaches often stem from ransomware attacks, where perpetrators encrypt critical data and demand payment for its release.

Rising Costs and Growing Threats

Sophos’ “State of Ransomware in South Africa” report for 2024 highlights the financial impact of these attacks. The mean ransom payment made by firms was R17.9 million, while the average recovery cost reached R19.44 million—excluding ransom payments. The report, based on a survey of 330 IT and cybersecurity firms, underscores the pressing need for proactive measures like those offered by StormWarning! to mitigate such threats effectively.

High-Profile Breaches

Government Employees Pension Fund (GEPF)

In February, the GEPF suffered a significant cyberattack. Initially, the fund claimed no data was compromised. However, ransomware gang LockBit released a 668GB archive in March, disproving these assertions. This incident highlights the importance of implementing continuous auditing and vulnerability management systems, such as StormWarning!, to detect and prevent such breaches.

Department of Public Works and Infrastructure (DPWI)

Between March and November, the DPWI experienced multiple breaches of its Sage accounting system, resulting in an estimated R55 million in losses. Minister Dean Macpherson acknowledged the shortcomings of the system, suggesting the use of more secure alternatives. StormWarning!’s automated NIST Cybersecurity Audit system could have preemptively identified vulnerabilities in the department’s IT infrastructure, potentially preventing these costly incidents.

National Health Laboratory Service (NHLS)

In June, the NHLS became the target of the hacking group BlackSuit, which stole 1.2 terabytes of sensitive data and erased portions of it, including backups. This attack crippled the NHLS’ ability to retrieve and store patient lab test results. Solutions like StormWarning!’s Cybersecurity Learning Management System (LMS) could train staff to recognize and respond to such threats, minimizing damage and ensuring quicker recovery.

Progress in Combating Cybercrime

Despite the surge in attacks, strides are being made in bringing cybercriminals to justice. According to Dominic White, MD of Orange Cyberdefense South Africa, collaboration between law enforcement and cybersecurity professionals has led to significant breakthroughs. Notably, arrests during operations like Interpol’s “Operation Jackal” have curtailed cyber-enabled financial fraud and reduced phishing attacks in South Africa.

The Path Forward

South Africa’s experiences in 2024 serve as a stark reminder of the evolving cybersecurity landscape. Proactive measures are essential to mitigate risks, minimize financial losses, and protect sensitive data. StormWarning! offers a comprehensive suite of solutions, including automated audits, tailored training, and policy enhancements, to bolster defenses against sophisticated cyber threats.

Investing in advanced tools and fostering collaboration between public institutions and cybersecurity providers in 2025 can help turn the tide against cybercrime, ensuring a safer digital future for South Africa.