The website of government-owned Public Investment Corporation’s (PIC) – which has more than R1.6 trillion under its management – has been hacked.
The Democratic Alliance (DA), which picked up on the incident, said that a Moroccan based hacker succeeded in breaching the PIC’s online security systems early Sunday morning, disabling the website and potentially gaining unauthorized access to the organisation’s private information.
The party provided a screenshot of the hack, which states: “Hacked By J4r; Gov’s Attacker !Moroccan Haxor”.
Google has also indexed the hack, showing the PIC’s search links with the same text.
“The DA will write to the Minister of Finance, Nhlanhla Nene, requesting urgent clarification on what measures have been taken to protect the integrity of information held by the Public Investment Corporation (PIC) following [the] cyber-attack,” said DA Shadow minister of finance, Dion George.
“This is a serious breach of the organisation’s cyber-security protocols and potentially compromises information on the investor’s operations and the private information of millions of South Africans.”
The PIC is a key driver for investment within the South African economy and is also responsible for managing funds acquired from public servants through the South African Government Employees Pension Fund (GEPF).
The PIC’s top five clients include
- The Government Employees Pension Fund (GEPF);
- The Unemployment Insurance Fund (UIF);
- The Associated Institutions Pension Fund (AIPF);
- The Compensation Commissioner: Pension Fund (CCPF);
- and the Compensation Commissioner Fund (CC).
The group did not return comment by the time of publication.