South African Revenue Service (SARS) has dismissed claims that its systems were breached, following allegations by a hacker group that it had compromised the tax authority’s digital infrastructure.
The controversy emerged after Nullsec Nigeria, a threat actor also known as Anonymous Nigeria, claimed to have breached both SARS and the State Information Technology Agency (SITA).
The hacktivist group allegedly posted links to download what it claimed was compromised data on the Breached hacker forum on Saturday, 23 May 2026, sparking concerns over a possible cyberattack targeting government systems.
However, SARS said it had conducted a thorough investigation into the claims and found no evidence that its systems had been compromised.
“SARS continuously monitors its systems for any suspicious activity and has conducted a thorough investigation in response to these reports. These claims are false and unsubstantiated,” the revenue service said in a statement.
“At this stage, there is no evidence that SARS’s systems have been compromised. SARS wishes to reassure the public regarding the integrity of its systems.”
The tax authority stressed that safeguarding taxpayer information remains one of its core responsibilities and forms part of its broader efforts to maintain public confidence in South Africa’s tax administration system.
SARS said the “protection of taxpayer information and the security of its digital platforms” is treated as “sacrosanct”.
The agency also urged South Africans to avoid sharing unverified claims and instead rely on official channels for accurate information.
“Members of the public are urged to verify information before sharing and not to circulate unverified claims or rely on information from unofficial sources,” SARS said.
At the same time, SARS warned taxpayers to remain vigilant against phishing scams and fraudulent messages falsely claiming to be from the tax authority.
For guidance on identifying scams and phishing attempts, SARS directed the public to its official online resource page: SARS scams and phishing guidance
SARS said it would continue monitoring its digital environment and communicate any developments through official platforms should the need arise.
