The Nigeria Data Protection Commission has launched an investigation into an alleged data breach involving Sterling Bank and Remita Payment Services Ltd.
The probe was announced following claims by a hacking platform, Bytetobreach, which alleged that it had accessed sensitive data belonging to several companies, including the affected firms.
In a statement, the commission said it has already issued a formal notice of investigation and is working with relevant parties to determine the extent of the incident.
According to the NDPC, the investigation will examine the type of personal data involved, the scope of the alleged breach, and the potential risks to individuals whose data may have been exposed.
The commission also stated that it will assess whether appropriate security and organisational measures were in place, as required under Nigeria’s data protection laws.
The National Commissioner of the agency, Vincent Olatunji, has further directed that organisations using digital payment systems without adequate data protection safeguards will be scrutinised as part of broader efforts to protect Nigeria’s digital ecosystem.
The outcome of the investigation is expected to determine whether any violations occurred and what corrective actions or sanctions may follow.
