The Madlanga Commission

Docket Leaks in South Africa: What They Are and What Is Verified

What a docket leak means in South Africa, how it differs from dumped files and data breaches, the recent cases, and the law that governs police dockets.

Published 2026-10-26

Docket Leaks in South Africa: What They Are and What Is Verified

Docket Leaks in South Africa: What They Are and What Is Verified

Open criminal docket on a records counter

A docket leak is the unauthorised disclosure of the contents of a police case docket, the file that holds statements, evidence and investigation notes. In South Africa the phrase is used loosely. It covers an official allegedly handing a file to a suspect, dockets sold for cash, papers dumped on a roadside, and even hacked police databases. Those are different problems with different legal consequences. This article separates them, sets out what is verified in recent reports, and explains the rules that decide who may see a docket.

Madlanga Commission
Follow the Docket Allegation in Context
The Madlanga Commission’s public hearing record helps readers follow testimony and evidence about the reported 2018 docket disclosure allegation.
Visit the Commission

TL;DR

Table of Contents

What “docket leak” actually means

A docket is the police record of a criminal case. Leaking it means someone with lawful custody passes it, or its contents, to a person with no right to it. The usual harm is to the case: a suspect learns who the witnesses are, which informants gave information, or what the state can prove, and then can tamper, intimidate or run.

The term is stretched in public debate, so it helps to separate four things.

Type What happened Example in the record
Leak or disclosure An insider shares a docket or its contents with an outsider The Madlanga allegation about a 2018 docket
Sale of dockets Officers or prosecutors allegedly sell files to suspects A Delft constable arrested in September 2026
Dumped files Physical records found discarded Steenberg (2022), Diep River (2026)
Data breach Hackers extract data from a system The Polmed incident involving police officers’ data

The Gupta leaks belong to none of these. They were a trove of emails and documents, and in 2018 Justice Zondo allowed data on three hard drives to be received as evidence at the state capture inquiry. That was a leak of private communications, not of a police case file.

The Madlanga Commission and the docket allegation

The Madlanga Commission is a judicial inquiry into criminality, political interference and corruption in the criminal justice system. Business Day reported on 21 July 2026 that the allegation labelled a “docket leak” at the inquiry concerned the alleged disclosure of a criminal docket in 2018 by Andrea Johnson, head of the Investigating Directorate Against Corruption, to crime-intelligence official Maj-Gen Feroz Khan, who was himself under investigation. Retired Hawks investigator Col Kobus Roelofse described the timing as improper because it came before Khan’s warning statement. The same report said the NPA was considering whether Johnson should be prosecuted.

Two cautions apply. These are allegations given in testimony, and the inquiry’s findings are what count. And a related but separate strand involves intercepted dockets: the hearing in which Fadiel Adams faced scrutiny over involving suspended Police Minister Senzo Mchunu in a matter about allegedly intercepted dockets. EWN also reported that IDAC is involved in investigating corruption allegations linked to senior police officials and the handling of sensitive dockets.

For witness-level detail, the archive’s profiles are the place to start, for example Bheki Cele’s witness page.

Recent reports: what is verified and what is not

The cases below are separated by how firmly the reporting stands.

Dockets allegedly sold

IOL reported that the sale of dockets by officers or prosecutors to suspects has been documented in several incidents, with prices ranging from R500 to R40,000. That report includes a September 2026 case in which a Delft constable was arrested for allegedly selling a docket. It also notes that in August 2026 a Free State court clerk was arrested for allegedly stealing five dockets, including murder, rape and sexual assault cases, prepared for court. “Arrested for allegedly” means no conviction. Treat each as unproven until a court decides.

Confidential information leaking in a live case

In 2017 News24 reported that a firearms investigation involving 3,028 dockets was affected by a leak of a confidential investigation diary and records that could expose an informant to the defence. A court order required interception directions to be handed to the prosecution. It shows the practical danger: one leaked page can identify a source.

WhatsApp and personal information

In 2022 the Information Regulator issued SAPS a summons after it failed to give sufficient information about the disclosure of rape victims’ personal details, allegedly shared by officials over WhatsApp. A later enforcement notice found that SAPS distributed personal information through WhatsApp and did not provide evidence of appropriate technical and organisational measures to protect it. This is a leak of victims’ details, which can happen without anyone handing over a whole docket.

Dumped files are a different category

In May 2022 News24 reported that residents found papers, rape kits and other police-related material near Steenberg Police Station. Police said preliminary findings showed none of the discarded paper was from dockets. In December 2022 a resident found hundreds of dockets dumped at Mdantsane NU10 and police gave an update a week later, so the two cases should not be lumped together.

In September 2026 the pattern repeated in Diep River. An internal inquiry found no evidence that dockets, charge sheets or other documents with pertinent case information were among the discarded papers, while the Portfolio Committee on Police asked for further verification. The committee chair said improperly discarded records could compromise personal information, evidence integrity and public confidence, as Daily Voice reported.

Three reported discarded-records cases and verification

A data breach is not a docket leak

In April 2026 the Sunday Times reported that hackers took police officers’ identity information, health records, financial data and home addresses in the Polmed incident. That is a cybersecurity failure affecting officers, not the exposure of case files.

Who may lawfully see a docket

The starting point is the 1995 Constitutional Court decision in Shabalala v Attorney-General of Transvaal. An academic analysis records that it abolished the common law blanket docket privilege, because a blanket rule conflicted with an accused person’s right to a fair trial. The state can still justify withholding specific material case by case, with the court weighing whether disclosure is needed for a fair trial against risks such as revealing an informant or intimidating a witness.

Court disclosure review balancing access and protection

For everyone else, access runs through the Promotion of Access to Information Act. Section 39 of PAIA requires refusal where the Criminal Procedure Act prohibits disclosure, and allows refusal where release could endanger investigations, confidential sources, witnesses, prosecutions or trial fairness. If you plan to request records, our guide on how to file a PAIA request walks through the steps.

The principle that officials must justify secrecy is not uniquely South African. In the United States, for instance, citizens use public records and FOIA litigation to challenge refusals, which shows how contested the line is between legitimate withholding and avoidable secrecy. South African readers should rely on PAIA and local legal advice.

Personal information and SAPS

POPIA also matters. Michalsons explains that the Information Regulator established POPIA applies to SAPS, because as of 2022 no legislation sets specific safeguards that would exclude SAPS from compliance in criminal investigations. The Regulator’s view there is that SAPS answers for officials who act in an official capacity or share personal information for which it is responsible.

How to check a docket claim before you repeat it

Whether you are a journalist, a lawyer or a worried resident, the same steps help.

  1. Name the record. Is it a docket, a charge sheet, a diary or general paperwork? Diep River and Steenberg both began as “dockets” and were not confirmed as such.
  2. Look for official confirmation. In Diep River the committee chair asked SAPS what records were involved and whether active matters were affected, and said it was premature to state that dockets had been dumped before an answer came, according to IOL.
  3. Ask whether the original exists elsewhere. SAPS policy is that concluded dockets go to station archives, and the protocol says the whole docket should be scanned so it can be reproduced if the hard copy is lost. A lost or dumped paper copy does not necessarily end a case.
  4. Do not publish identifying details. Names of complainants, witnesses and informants can cause harm. Our guides on source protection and in camera hearings explain how those protections work.
  5. Separate allegation from finding. Sworn testimony before a commission, an arrest and a conviction are three different levels of proof.

If you hold a docket or copies of one, do not circulate it. Speak to an attorney first, and if you fear for your safety see our guide on applying for witness protection.

Our perspective

We see the same pattern in docket stories: the headline says “leak”, the evidence turns out to be thinner or different, and the public ends up with less trust than the facts justify. The reverse also happens, where real disclosures are brushed aside as rumour. The way out is a record that anyone can check.

That is why we organise the Madlanga hearings by day, witness, exhibit and ruling, and cross-reference them. A reader should be able to see what a witness actually said under oath about a docket, who else is mentioned and which documents were produced, without watching hours of live feed. A docket claim is only as strong as its source, and a source is only useful if you can find it again.

We also hold the line on what we do not publish. Dockets contain the names of victims, witnesses and informants. Transparency about how the justice system fails does not require exposing the people it is meant to protect.

— Meriol Lainchyon

Follow the hearings without the live feed

Our archive lets you trace docket-related evidence across witnesses, exhibits and rulings. Start with The Investigation Room, which maps the network of evidence, or search from the Madlanga Commission homepage. Access is free. The Commission’s own site, criminaljusticecommission.org.za, also publishes official records, transcripts, statements and rulings.

FAQ

Is leaking a police docket a crime in South Africa?

It can be. Depending on the facts, an official who discloses a docket may face criminal charges, disciplinary action or both, and the disclosure of personal information can breach POPIA. In the Madlanga matter, Business Day reported the NPA was considering whether to prosecute, which shows that no outcome should be assumed until a decision is announced.

Can I get a copy of a docket?

Only in limited cases. An accused person is generally entitled to docket material needed for a fair trial, though the state may withhold specific items to protect informants or witnesses. Others must use PAIA, and section 39 requires refusal where the Criminal Procedure Act prohibits access.

Were dockets dumped in Diep River?

That was not confirmed in the reports available. An internal inquiry found no evidence that case dockets were among the papers, and the Portfolio Committee on Police asked SAPS for further verification. Wait for SAPS’s formal answer before describing the material as dockets.

Is the Madlanga docket allegation proven?

No. It is evidence given at the inquiry and reported by Business Day, concerning a 2018 disclosure. The Commission’s final report is where findings will be made, and prosecutions would be a separate court process.

Sources