NDPC Investigates Remita and Sterling Bank for Data Breach

The Nigeria Data Protection Commission (NDPC) has launched an investigation into Remita Payment Service Ltd and Sterling Bank over an alleged data breach that may have compromised the financial data of millions of Nigerians. The probe began on April 1, 2026, with the aim of determining the nature and scope of the alleged breach and the risks it poses to data subjects.

Babatunde Bamigboy, the head of legal enforcement at the NDPC, confirmed that a formal notice has been served to the organizations involved. The NDPC emphasized that entities found to have failed in implementing adequate data protection measures could face sanctions under the Nigeria Data Protection Act 2023.

This act requires organizations to implement strict technical safeguards to protect user data. The investigation follows claims by hackers on the dark web, who allegedly accessed sensitive data linked to the fintech firm, including bank verification numbers and transaction histories.

The outcome of the investigation is expected to have significant implications for data protection compliance and consumer trust in Nigeria's rapidly evolving digital economy.