ABUJA, FCT — By Prime Brief Media
The Nigeria Data Protection Commission has raised a nationwide alarm over what it describes as coordinated cyber threats specifically targeting the country's financial architecture and digital payment ecosystems.
In an advisory issued on Thursday and seen by The Guardian, the NDPC confirmed that a technical assessment of the current threat landscape revealed "shadowy threat actors" actively working to compromise Nigeria's data security architecture. The commission stated that the sophistication and coordination of these attempts indicate a deliberate campaign rather than isolated criminal activity.
"Preliminary analysis suggests these actors are probing vulnerabilities across the banking, fintech, and telecommunications sectors with the apparent objective of disrupting services or exfiltrating sensitive personal and financial data," the advisory read in part.
The NDPC has directed all Data Controllers and Data Processors operating within Nigeria's digital economy to "urgently step up" technical and organisational safeguards. Mandatory measures outlined in the directive include the immediate implementation of Multi-Factor Authentication protocols across all sensitive systems and the adoption of Zero-Trust architecture principles to limit lateral movement within networks.
The commission specifically warned that the financial services sector, which has experienced rapid digitisation and increased transaction volumes in recent years, remains particularly vulnerable. Fintech companies and digital lenders, many of which handle vast repositories of personal identifiable information, have been singled out for heightened vigilance.
A cybersecurity expert who consults for several Nigerian banks and spoke to Prime Brief Media on condition of anonymity confirmed that financial institutions have observed a marked uptick in phishing campaigns and credential-stuffing attacks over the past fortnight. "There is a noticeable pattern. The attackers are patient and methodical. They are not simply casting a wide net; they appear to understand the Nigerian regulatory and banking environment," the source indicated.
The NDPC advisory further reminds all entities processing personal data of their obligations under the Nigeria Data Protection Act and warns that failure to implement adequate security measures may attract significant administrative penalties.
The Central Bank of Nigeria has yet to issue a formal statement on the specific alert. However, banking industry sources indicate that the CBN's Risk-Based Cybersecurity Framework and Guidelines are being rigorously enforced across all deposit money banks and payment service providers.
Prime Brief Media continues to monitor the situation and will report further as details emerge. Members of the public are advised to avoid clicking on unsolicited links, verify the authenticity of any communication requesting login credentials, and immediately report suspicious account activity to their financial institutions.
Tags
Cyber Watch