Serial Killer Investigation Timeline
July 2026
-
17 July: Itumeleng Kekana (32) disappears from Kempton Park
-
Originally from QwaQwa
-
Worked selling beauty products
-
Last seen around 7:00 PM after telling a colleague she was stepping out to meet a client
-
Said she “would be back”
-
Brother Themba Kekana and boyfriend searched clinics, hospitals, and mortuaries for weeks
-
August 2026
-
3 August: Itumeleng Kekana’s body discovered near a river along the R21 highway
-
Found 17 days after she went missing
-
Identified by brother and boyfriend
-
Found partially naked with heavy facial injuries making her unrecognizable
-
Had cuts and bruises below her breast
-
Positive identification only possible by body size, complexion, and dyed hair
-
-
22 August: Itumeleng laid to rest in QwaQwa
-
Survived by a 14-year-old daughter and a younger sister
-
-
Note: Initial police reports had slightly different placeholder dates, but family account confirms she went missing July 17 and was found August 3
September 2026
-
7 September: Unidentified female (late 20s) found floating in a river near Tembisa Mall in Clayville
-
10 September: Unidentified female found naked in advanced decomposition near Rhodesfield
-
12 September: Elizabeth “Tsontso” Moselakgomo (38) found partially clothed in bushes behind a hotel in Rhodesfield
-
Disappeared during an afternoon jog
-
Was killed during her routine afternoon run in the Rhodesfield area
-
Body hidden in nearby bushes
-
-
14 September: Unidentified female found partially clothed with heavy bruising on Porcelain Avenue in Olifantsfontein
-
15 September (Morning): Unidentified female (early 30s) found with severe facial injuries near Blesbokspruit River along Welgedacht Road in KwaThema, Springs
-
15 September (Evening): Eighth victim added to high-level probe
Victim Patterns
-
Some victims attacked while walking or hitchhiking along major transport routes
-
Bodies dumped alongside R21 highway, near rivers, or close to train stations
South African Companies Hacked
Confirmed Victims
-
CarTrack (Karooooo)
-
RelyComply
-
Bidvest Bank
-
EasyEquities (Purple Group)
-
Peregrine Capital
-
Cell C Fibre
Also Mentioned in Notes
-
SnapScan
-
Satrix
-
Standard Bank
Total companies mentioned: 9
Not Counted
-
Dire Wolf (ransomware gang, not a victim)
-
The “23 organisations” claimed by Dire Wolf (unnamed)
Cybersecurity Breach Timeline
-
28 Aug 2026: CarTrack (Karooooo) company response begins
-
2 Sep 2026: Dire Wolf lists CarTrack
-
7 Sep 2026: CarTrack confirms publicly
-
9 Sep 2026: Dire Wolf listing dated for RelyComply
-
9 Sep 2026: Cell C Fibre provider incident
-
12 Sep 2026: Bidvest Bank customer notice (Saturday, hours before EasyEquities)
-
12–13 Sep 2026: EasyEquities (Purple Group) customer emails (Saturday night)
-
12–13 Sep 2026: Peregrine Capital same weekend; explicitly named RelyComply
-
13 Sep 2026: Cell C Fibre customer notices
-
Date not specified: RelyComply ransom deadline before full dump
-
Earlier in 2026: Standard Bank large separate breach (different attackers, not this wave)
-
Weekend of 12–13 Sep 2026: Satrix mentioned in one secondary report as also notifying customers (not confirmed)
Podcast/Video Timestamps
-
0:00 — Serial killer investigation
-
5:05 — Cybersecurity threats
-
7:59 — Zimbabwean newspaper review
-
11:19 — Herald and national news
-
14:33 — Chronicle and city politics
-
15:51 — Regional news updates
-
16:52 — Political and social media
-
19:35 — International relations
