Sassa 'at risk' from hackers

SECURITY GRANT BENEFICIARIES' IDS, PERMITS, BANKING DETAILS MAY NOT BE SAFE

- Enkosi Selane

A forensic investigation commissioned by the department of social development has uncovered alarming security vulnerabilities in the South African Social Security Agency (Sassa)'s social relief of distress (SRD) grant system, potentially putting beneficiaries' personal information at significant risk.

Masegare & Associates Incorporated, the investigative firm hired to examine the system, revealed critical security gaps that could expose sensitive data to potential cyber attacks.

The investigators' findings were presented in parliament yesterday, after Social Development Minister Sisisi Tolashe recommended a comprehensive investigation of the SRD system and all other grant systems administered by Sassa, with the investigation to be completed within 30 days.

It was found the Sassa online system does not have encryption for sensitive data such as IDs, permits or banking details.

The investigations came as two first-year students from the University of Stellenbosch, Joel Cedras and Veer Gosai, claimed the SRD application system was vulnerable to digital threats.