Agency refutes claims of 2024 SASSA data breach

The South African Social Security Agency denies that a data breach occurred in 2024 involving two first-year computer science students. As reported by The South African this week, two Stellenbosch University students claim to have had their ID numbers stolen and used nefariously to claim the R370 SASSA SRD grant. They then dug deeper and were able to run 300 000 ID numbers through the system.

2024 SASSA DATA BREACH

Now, SASSA has taken to social media platform X to refute claims of a 2024 SASSA data breach by the students. In the agency’s release, it explains their Social Relief of Distress system has ‘not been manipulated’ in anyway. It also acknowledges that 60% of the youth are unemployed and therefore there have been, “various attempts by individuals to take advantage of the government’s support of the country’s most vulnerable people.” However, it says this type of fraud is ‘nothing new’ and is well known to SASSA authorities.

Moreover, the agency says it has evolved with the ‘changing risk landscape’ over the years. And it has implemented several countermeasures to identify potentially fraudulent activity. Plus, there are further processes being readied to roll out with a new SASSA SRD mobile app. The key, says the agency, is not inconveniencing beneficiaries who are not technology literate.

VULNERABILITY VS FUNCTIONALITY

Following revelations of the alleged 2024 SASSA data breach, the agency wants to remind residents that it works closely with many fraud detection and financial services providers. This includes piloting a somewhat controversial program called Know Your Client (eKYC), which uses biometric verification.

This system matches digital images taken and uploaded via smartphone with those on file at the National ID Database at Home Affairs and Integrated Justice System (the police). However, the big issue with this integration is not everyone has a smart ID card and may therefore be kicked out of the system unwittingly. Better still, SASSA claims its latest countermeasures are working and has blocked more than two-million fraudulent applications, putting them into ‘referral’ status (more on that below).

CHECK YOUR SASSA SRD STATUS

A reminder that SASSA SRD applicants must check their status each month. Payments are typically spread over five days, with October stipends paid between Friday 25 October and Tuesday 29 October 2024. A reminder that the agency says funds may take between 2-3 days to reflect in your account. When you punch in your ID number, name and cellphone number you will receive one of the following responses as to your current status:

• COMPLETE – Your application is received but is not approved yet. There is nothing more you need to do here.
• PENDING – SASSA is in the process of verifying your application. No further action is needed.
• APPROVED – Congrats, SASSA has approved your grant application for the month. The agency will inform you when your next payment date is.
• BANK DETAILS PENDING – If SASSA does not have your banking details or a chosen payment method, you need to update this.
• REAPPLICATION PENDING – This means you need to submit a reapplication for the SRD grant (this must be done every month).
• DECLINED – SASSA has declined your application because you did not meet all the criteria. The reason why will be listed.
• CANCELLED – If you have a job, no longer meet the requirements and the agency believes you receive other income.
• REFERRED – This means your account is one of the two million considered suspect. To clear any issues around potentially fraudulent activity – like your account has been hacked – email: referred@sassa.gov.za