InvestNaija Reports Data Security Incident Amid Cyber Threats

Fresh concerns regarding cybersecurity threats in Nigeria's financial sector have emerged following a reported data security incident involving InvestNaija on October 28, 2026. The digital investment platform disclosed that it received information about potential unauthorized access to a small portion of customer data, representing less than one percent of its customers' information.

InvestNaija detected unusual traffic across its retail channels and took immediate action to strengthen security controls. The company reported the incident to law enforcement and the relevant regulatory body in compliance with the Nigeria Data Protection Act 2023.

Although the incident was believed to be contained, InvestNaija warned that a third party might have obtained some customers' email addresses and contact information. Customers were advised to remain vigilant against suspicious communications.

Concurrently, First Bank issued warnings about a growing scam involving fraudulent pop-up messages on mobile devices, designed to trick users into disclosing sensitive banking information.