NDPC Investigates Sterling Bank Over Data Breach Claims

The Nigeria Data Protection Commission (NDPC) has launched a formal investigation into Sterling Bank regarding an alleged data breach associated with the bank's involvement in Nigeria's digital payment ecosystem. The investigation, confirmed by Babatunde Bamigboy, head of legal enforcement at the NDPC, will assess the type of personal data potentially exposed, the scope of the breach, and the level of risk posed to affected data subjects.

The NDPC has mandated Sterling Bank to provide relevant information related to the incident by April 1, 2026. This scrutiny comes amid increasing regulatory pressure on financial institutions to comply with the Nigeria Data Protection Act 2023.

Vincent Olatunji, the chief executive officer of the NDPC, emphasized that organizations deploying digital payment systems without adequate technical safeguards will face heightened scrutiny. The investigation reflects broader concerns about cybersecurity vulnerabilities within Nigeria's rapidly growing digital banking and payment infrastructure.