Short answer
GroundUp reported in late September 2026 that the database behind Gauteng's e-Panic Button app was left open, exposing the names, reports and locations of people who asked for help. The Gauteng Department of e-Government says it stopped an attempted breach and that no citizens' personal information was compromised, a position the provincial legislature's committee has not accepted without evidence.
If you think your details were included, start with our checklist on what to do after a data breach.
Key facts
| Organization | Gauteng Department of e-Government (e-Panic Button app) |
|---|---|
| Incident type | Data leak |
| Status | Under investigation |
| Sector | Government (emergency services app) |
| Country | South Africa |
| Detected | 2026-09-21 |
| Disclosed | 2026-09-28 |
| People or records affected | The department reports about 288,000 active users. How many people's data was exposed has not been stated. |
What data was exposed
- Names and personal details of people who used the app (per GroundUp, as cited by the DA)
- Contents of crime reports, including domestic violence and assault reports, and attached photographs (reported)
- GPS locations and location histories, some dating back to the 2024 launch (reported)
- One-time login PINs (reported)
- ID numbers, driver's licence details and medical aid information (reported by ITWeb)
What happened
The Gauteng e-Panic Button is a provincial app that lets people send distress alerts and share their location with emergency services. The Gauteng Department of e-Government told ITWeb it has about 288,307 active users and has handled more than 114,000 call-outs.
According to EWN, GroundUp investigated the app. The reporter, speaking to EWN, said he did not hack the system. Static analysis of the app showed the database was open to people without the required permissions. In some cases, he said, “you didn’t need any account at all.” He alerted the app’s developers on 21 September. He said they responded quickly, but that the department never answered his emails.
What was reportedly exposed
As cited by TimesLIVE, the Democratic Alliance (DA) said the GroundUp report found names, personal details, crime report contents, photographs, GPS locations and location histories, plus one-time login PINs. Reports about domestic violence and assault were among them. ITWeb’s later report also lists ID numbers, driver’s licence details and medical aid information. These are reported claims. The department has not confirmed them.
The department’s position
On 29 September the department said it had identified an attempted security breach, described the attacker as a “highly-specialised organisation”, and said “no citizens’ personal information was compromised.” MEC Bonginkosi Dhlamini said technical teams had fixed the vulnerabilities and strengthened controls, ITWeb reported. The same article notes that the department’s account and GroundUp’s findings conflict, and that it does not resolve the conflict.
Oversight and open questions
The Gauteng Legislature’s e-Government committee said it was “deeply alarmed” and “will not accept assurances without evidence,” per ITWeb. It asked whether the data was accessed or misused, whether residents and the Information Regulator were told, and how the flaw went unnoticed. eNCA reports the committee chair wants access records from the 2024 launch to date.
Still unknown: how long the data was open, whether anyone other than the reporter reached it, and how many users are affected. EWN also reports that a criminal complaint was opened after the disclosure. The province told EWN that opening a police case after a security breach is standard procedure.
What users can do
Emergency app users are in a sensitive position. A scammer or an abuser with a location history holds a powerful tool against you. Learn how to spot phishing messages, and see our guidance on government impersonation scams before you answer any call about your report. For the steps to take after any leak, read what to do after a data breach. More incidents are on the breaches page.
Scams to watch for after this breach
Criminals use breach news as cover. Expect messages that mention the incident, quote real details, or offer help.
- Extortion or intimidation messages that quote a person's reported incident or location back to them
- Fake calls or texts from 'the e-Panic Button team', police or the department asking you to confirm a PIN, ID number or one-time code
- Impersonation of legal, compensation or 'claims' services offering to sue the province for a fee
- Phishing that uses stolen ID or medical aid details to take over bank, SIM or medical aid accounts
What to do if you are affected
- 01Never give an e-Panic Button login PIN or one-time code to anyone who contacts you. The department has not said it will ask for one.
- 02If you have used the app, treat any message that mentions your report, your address or your location as suspect. Contact the department or SAPS using details from the official Gauteng government site.
- 03If you are in danger from an abuser or someone who may know where you live, tell a trusted person and consider changing routines and your phone number.
- 04Watch your bank, mobile and medical aid accounts for changes you did not make, and ask your provider to add extra verification if your ID number may have been exposed.
- 05You can complain to the Information Regulator about how the department handled your information. Check its official site for how to lodge a complaint.
- 06Do not pay anyone who says they hold your report or location data.
Frequently asked questions
Was the Gauteng e-Panic Button app hacked?
Not in the usual sense. GroundUp's reporter told EWN he did not hack the system. He says static analysis of the app showed its database could be reached by people without the right permissions, in some cases without any account. The department calls it an attempted security breach.
Has the Gauteng government confirmed that data was exposed?
No. The department says the incident was swiftly identified and addressed and that no citizens' personal information was compromised. GroundUp, the DA and the legislature's committee describe sensitive data as exposed. The facts are disputed.
How many people are affected?
Unknown. The department cites about 288,000 active users, but it has not said how many users' records were exposed. EWN reports about 280,000 people were using the app.
Has the Information Regulator been told?
On 29 September the regulator said it had not yet received a security compromise notification from the department. We could not confirm whether or when a notification was later filed.
Is it safe to keep using the e-Panic Button?
The legislature's e-Government committee chair said after a briefing that the app was unsafe to use, according to eNCA. The department says the vulnerabilities were fixed and extra testing requested. Follow the department's official guidance and keep other ways to reach emergency services.
Sources
- Gauteng emergency app exposed users' private information, EWN, 2026-10-15
- Gauteng e-Panic Button targeted in security breach, ITWeb, 2026-09-29
- E-Panic Button security flaw sparks legislature probe, ITWeb, 2026-10-01
- DA calls for probe into Gauteng e-Panic Button data breach, TimesLIVE, 2026-09-28
- Gauteng e-panic safety under scrutiny, eNCA, 2026-10-03
This post summarises public reporting as of 2026-10-30. Details of live incidents change; we update posts when the organization or regulators publish new facts. Spot an error? See our editorial and corrections policy.