Telecom
Digital Encode Calls for Immediate Action as Cyber Threats Escalate Nationwide
Digital Encode Limited, a leading information security and governance, risk, and compliance (GRC) advisory firm, has issued an urgent cybersecurity advisory following a surge in security breaches affecting financial institutions, government agencies, fintechs, and other organizations across Nigeria.
Digital Encode
Cyber threat actors have recently exposed data purportedly from both private and public institutions in Nigeria, underscoring the growing need for stronger cybersecurity frameworks, proactive threat monitoring, and coordinated incident response measures.
But Digital Encode’s advisory highlights a troubling pattern: most recent cyber incidents are not driven by sophisticated zero-day exploits, but by preventable weaknesses in basic security configurations, credential management, and operational controls.
According to the advisory signed by Professor Obadare Adewale Peter, Chief Visionary Officer of Digital Encode Limited, attackers are increasingly exploiting misconfigured systems and publicly exposed assets, such as unsecured databases, open cloud storage buckets, leaked API keys, and critical servers exposed to the internet, many of which are easily discoverable through open repositories, cloud indexing tools, and even dark web marketplaces.
The advisory outlines critical areas of concern, including publicly accessible cloud storage exposing sensitive customer and operational data; hardcoded secrets in web and mobile applications, including API keys and tokens; leaked credentials in repositories and deployment artifacts; weak internal access controls and over-reliance on single authentication layers; exposure of administrative endpoints, API documentation, and development environments in production; uncontrolled use of Third-Party Hosting platforms such as Vercel, Netlify, and Render; poor token lifecycle management and weak authentication, inadequate vendor risk management and monitoring controls
Digital Encode noted that these vulnerabilities are widespread across organizations, particularly in financial institutions, payment service providers, Fintech companies and public sector platforms, where similar exposure patterns continue to recur.
Not a Technology Problem, But an Execution Gap
“Organizations affected in recent breaches were not compromised due to highly advanced attacks, but due to lapses in enforcing existing security controls, like, ensuring that no cloud resources linked to organizations whether AWS S3, Azure Blob, Google Cloud Storage, or Firebase allow anonymous access, Verify that no cloud credentials or API tokens are exposed in public or private repositories, container registries or deployed applications, and all external and internal APIs must enforce authentication and authorization controls at all times” Prof. Obadare stated.
The advisory stresses that most of these risks can be mitigated with readily available tools and best practices, underscoring a critical gap between security policy and implementation.
Urgent Actions Recommended
Digital Encode has called on organizations to act immediately by conducting a comprehensive audit of all internet-facing assets, including third-party systems; revoking and rotating all exposed or potentially compromised credentials including passwords, API keys, and access tokens; reviewing historical logs to assess the extent of any prior exploitation; engaging vendors to address third-party security exposures; fixing identified misconfigurations and validating remediation efforts; strengthening monitoring, logging, and threat detection systems; and documenting remediation steps and residual risks for governance and compliance.
The firm also emphasized the need for improved visibility into shadow IT and unauthorized deployments tied to employees’ accounts, which increasingly serve as entry points for attackers.
Call for Proactive Security Posture
Digital Encode reiterated its commitment to supporting organizations through enterprise-wide security assessments and independent validation of implemented controls.
“We strongly advise that this advisory be actioned without delay,” Prof Obadare warned, adding that proactive security hygiene, not reactive response, will determine resilience in Nigeria’s evolving threat landscape.
Telecommunications operators have called on the Federal Competition and Consumer Protection Commission (FCCPC) and the Nigerian Communications Commission (NCC) to establish a clear regulatory framework for airtime and data credit services, warning that millions of Nigerians could face fresh disruptions if the agencies fail to coordinate their responsibilities.
Gbenga Adebayo, chairman, ALTON
This is coming on the heels of the Federal High Court judgment affirming the FCCPC’s authority to regulate consumer protection in the airtime and data credit market while preserving the NCC’s exclusive mandate over telecommunications licensing and technical regulation.
The ruling effectively clarified that both regulators have complementary roles rather than overlapping powers.
Association of Licensed Telecommunications Operators of Nigeria (ALTON), said the judgment should serve as the basis for stronger collaboration between the two regulators to avoid the regulatory uncertainty that earlier forced operators to suspend airtime and data credit services.
Gbenga Adebayo, chairman, ALTON, said the industry was not disputing the authority of either regulator but was seeking a clearly defined operational framework before any further regulatory actions are taken.
“The court has done something important. It has confirmed the FCCPC’s authority and, in the same breath, affirmed that the NCC’s role is preserved. Concurrency means coexistence. The industry now expects both regulators to establish the coordination framework that the court’s reasoning requires,” Adebayo said.
He stressed that regulatory certainty had become critical because millions of Nigerians depend on airtime and data credit services for daily communication.
“Forty million Nigerians depend on these services. The court has made clear that both regulators have a role. The industry is asking them to define how that works before any action that could disrupt access again,” he stated.
Adebayo also urged both agencies to engage industry stakeholders before introducing measures capable of affecting consumer access to the services.
According to him, the Presidential Enabling Business Environment Council (PEBEC) directive requiring Regulatory Impact Assessments before major policy changes should be observed to minimise unintended consequences on businesses and consumers.
The renewed call comes months after major mobile network operators temporarily suspended airtime and data borrowing services following the implementation of the FCCPC’s Digital, Electronic, Online and Non-Traditional Consumer Lending (DEON) Regulations, a development that affected millions of subscribers nationwide.
In its judgment, the Federal High Court held that while the FCCPC has powers over competition and consumer protection issues in the digital lending ecosystem, it cannot assume the NCC’s statutory responsibility for licensing telecommunications operators.
Justice Ambrose Lewis-Allagoa ruled that the two agencies must operate within their respective mandates, describing their relationship as one of “coexistence, not displacement.”
MTN Nigeria has warned customers to disregard fraudulent online posts claiming the telecom operator is offering “1 Month Free Data for Old Subscribers,” describing the promotion as fake and unauthorised.
In a statement shared on its X handle, the telco said the circulating promotion is not from MTN and is not affiliated with the company.
MTN urged customers not to click on the accompanying link in the online post or provide their phone numbers or personal information on any third-party website.
Customers are advised not to click on the link or provide their phone numbers or personal information on any third-party website.
“We will never require customers to submit their details on external platforms to claim data or any other reward,” MTN said.
The company added that all genuine promotions, products and services are announced only through its official communication channels.
“All authentic MTN promotions, products and services are communicated exclusively through our official channels, including www.mtn.ng, our verified social media pages and *180#,” the company said.
MTN also urged customers to remain vigilant against online scams designed to steal personal information, warning that fraudulent offers often impersonate trusted brands to deceive unsuspecting users.
“Don’t be the next victim!” the company said, reiterating that the purported “1 Month Free Data for Old Subscribers” offer is fake and not associated with MTN Nigeria.
National Industrial Court of Nigeria (NICN), sitting in Ikoyi, Lagos, has dismissed a Notice of Preliminary Objection filed by Pan African Towers Ltd. (PAT) in an employment dispute instituted by its former Managing Director and Chief Executive Officer, Mr. Azeez Amida.
The court also awarded ₦500,000 in costs against the company after holding that the application lacked merit.
Justice Essien, who delivered the ruling on July 21 in Suit No. NICN/LA/143/2025: Mr. Azeez Amida v. Pan African Towers Limited, held that the substantive case concerning Amida’s alleged outstanding contractual entitlements under a Mutual Separation Agreement should proceed to hearing.
The ruling effectively rejected the company’s attempt to terminate the proceedings on jurisdictional grounds.
Jurisdictional Challenge Rejected
Pan African Towers had argued that the National Industrial Court lacked jurisdiction to entertain the matter because the Mutual Separation Agreement executed between the parties required disputes to first pass through negotiation, mediation and arbitration before litigation could be initiated.
The company maintained that Mr. Amida failed to exhaust those contractual dispute resolution mechanisms before approaching the court.
However, Justice Essien rejected the argument after examining evidence presented by the claimant showing that several attempts had been made to activate the agreed dispute resolution process before legal proceedings commenced.
According to the court, documentary evidence showed that Mr. Amida, through his solicitors, issued correspondence and formal demand letters aimed at resolving the dispute amicably in line with the terms of the agreement.
The court found that rather than engaging with those efforts, Pan African Towers failed to meaningfully participate in the process and later sought to rely on the same contractual provisions to challenge the court’s jurisdiction.
Evidence Considered by the Court
According to evidence presented by Mr. Amida’s legal team, the court considered correspondence involving senior officials of Pan African Towers and its investors.
Among the documents relied upon was a letter allegedly written by the Chairman of the Board of Pan African Towers and Partner at Development Partners International (DPI), Mr. Adefolarin Ogunsanya, rejecting the demand made by Mr. Amida’s legal representatives for an amicable resolution before litigation.
The claimant’s legal team also tendered multiple email communications allegedly sent from January 2025 to Verod Capital Management’s in-house legal counsel, Mr. Dipo Okuribido.
According to the claimant, those emails did not receive any response before the commencement of the suit.
Based on the evidence before it, the court held that the conduct of Pan African Towers was inconsistent with reliance on the contractual dispute resolution provisions.
Justice Essien ruled that the company had effectively waived its right to insist on arbitration after frustrating the preliminary dispute resolution process contemplated by the parties’ agreement.
The court consequently held that Pan African Towers could not rely on the arbitration clause to prevent the court from hearing the substantive claims.
Court Awards Costs
Having dismissed the Preliminary Objection, the National Industrial Court awarded costs of ₦500,000 against Pan African Towers.
The court described the objection as lacking merit.
Substantive Defence Yet to Be Filed
The ruling represents the first judicial determination in the employment dispute.
The claimant’s legal team noted that since the suit commenced, the principal response filed by Pan African Towers had been the Preliminary Objection challenging the jurisdiction of the National Industrial Court.
According to the claimant, the company has yet to file a substantive defence addressing the merits of the claims relating to the alleged outstanding contractual entitlements.
With the dismissal of the jurisdictional challenge, the matter will now proceed to hearing on its merits.
The court adjourned the substantive suit until Jan. 12, 2027.
Background to the Dispute
The dispute arose following Mr. Amida’s departure from Pan African Towers after both parties executed a Mutual Separation Agreement.
According to the claimant, while the agreement governed the terms of his exit from the company, certain contractual entitlements remained unpaid.
His legal representatives said they initially sought to resolve the dispute through the mechanisms provided under the agreement by engaging the company through correspondence and formal demand letters.
When those efforts failed to produce a resolution, they commenced proceedings before the National Industrial Court seeking payment of the outstanding contractual entitlements.
Rather than filing a substantive defence to the claims, Pan African Towers challenged the jurisdiction of the court, arguing that arbitration and other dispute resolution mechanisms had not been exhausted.
The National Industrial Court has now rejected that position.
Related Commercial Litigation
The employment proceedings are separate from ongoing commercial cases before the Federal High Court involving Mr. Amida, Development Partners International (DPI), Verod Capital Management and other parties.
Those proceedings relate to issues concerning the ownership of Pan African Towers and remain pending before the courts.
The National Industrial Court noted that those matters would be determined independently based on their respective facts, evidence and applicable legal principles.
Legal Team Reacts
Reacting to the ruling, representatives of Mr. Amida’s legal team welcomed the decision.
“The Court has affirmed an important principle of contractual dispute resolution.
“A party cannot frustrate the agreed process and later seek to rely on that same process to prevent a claim from being heard.
“We now look forward to presenting the substantive case before the Court,” the legal team said.
The lawyers acknowledged that Pan African Towers retained the right under Nigerian law to pursue any available appellate remedies but stated that they were fully prepared for the substantive hearing scheduled for January 2027.
NDIC Begins Payment to Depositors of 46 Failed Microfinance Banks
Telcos Seek Clear Regulatory Framework on Airtime Credit Services
FG Says Rumours, Fear, Can Crash Banks
MTN Warns Customers against Fake Promo
EU Debunks Fake Compensation Scheme Targeting West African Bank Customers
NRC, Ponzi Scheme Collapses Resulting Loss of Billions of Naira
NASENI Moves to Digitize CCB’s 5m Assets Declaration and Operations
Lebara Nigeria Launches Lebara Play, Africa’s First Telecom-Owned Micro-Drama Platform
Tokenization, Blockchain Technology will Transform Financial Institutions – IMF
EFCC Busts NIS Visa Overstay Racket, Uncovers N700m in an Account
News3 days agoYEDC Warns Customers, Says 20 Percent Electricity Bonus is Scam
News3 days agoPFIPC Probe: Dollar, Pounds Accounts of Fake Agency Inactive – CBN
Broadcasting3 days agoNBC, INEC, Plan Joint Broadcast Monitoring Framework ahead of 2027 Elections
News3 days agoSTEM Africa Fest to Nurture Nigeria’s Future Innovators
E-Business3 days agoJumia Nigeria Expands Flexible Payment Options with Klump Partnership
E-Financial3 days agoNo Going Back on July 31 Deadline for Insurance Firms’ Recapitalisation – NAICOM
E-Business3 days agoLagos Unveils N10m Single-digit Loan Scheme for MSMEs
E-Financial3 days agoCourt Affirms FCCPC’s Power to Regulate Digital Lending