NDPC Investigates Remita, Sterling Bank Over Alleged Data Breach

NDPC Investigates Remita, Sterling Bank Over Alleged Data Breach

JOEL OLADELE, Abuja

The Nigeria Data Protection Commission (NDPC) has commenced an investigation into an alleged data breach involving Remita Payment Services Limited, Sterling Bank and other organisations, raising fresh concerns over data security in Nigeria’s financial services space.

In a statement signed on Sunday by its Head of Legal, Enforcement and Regulations, Babatunde Bamigboye, the commission disclosed that notices of investigation were issued to the affected parties on April 1, 2026, with responses already being received.

The NDPC said the exercise is aimed at determining the extent of the alleged breach and safeguarding the rights of individuals whose data may have been exposed.

“The aim of the investigation is to ensure that data subjects are protected with appropriate technical and organisational measures,” the statement read.

It noted that the probe would assess the categories of personal data involved, the scope of the incident, possible risks to affected individuals, and the remedial actions taken where breaches are established.

The commission’s National Commissioner and Chief Executive Officer, Vincent Olatunji, has also ordered a wider review of organisations operating digital payment platforms without adequate data protection structures, in line with the Nigeria Data Protection Act, 2023.

The development follows recent claims circulating within cybersecurity circles alleging that systems linked to Sterling Bank may have been compromised, with reports suggesting that customer data could have been exposed.

Similar concerns have also trailed Remita, a major payment gateway widely used for government transactions.

Although the affected organisations are yet to confirm any breach, the incident has intensified scrutiny of data protection practices in the banking and fintech sectors.

The move by the NDPC aligns with its recent enforcement actions, as the regulator steps up oversight to ensure compliance and strengthen trust in Nigeria’s growing digital economy.