News
Securing the Healthcare Industry: Prevention is Better Than Cure
The healthcare industry, arguably one of the most technologically advanced considering the gadgets and devices now used to monitor health statistics and perform medical procedures, is ironically among the most ‘unhealthy’ when it comes to network security.
Delegates attending the recent Healthcare Innovation Summit were told that medical records are being increasingly targeted by cybercriminals – data from the US showed that 89% of healthcare institutions suffered a security breach and were twice more likely to be targeted than other organisations.
Healthcare record theft increased a shocking 1100% this year with more than 100 million records compromised worldwide. The biggest threat, says KPMG, comes from external attackers – at 65% – while malware tops the list of information security concerns.
But why is an industry with the technological ability to perform surgery on patients in other countries so sick when it comes to protecting information?
The answer is multi-faceted:
Valuable data: Data collected and stored by hospitals and other organisations, such as medical aid schemes, is up to ten times more valuable to cybercriminals than credit card information.
This is due to the sheer volume of information gathered about individuals – and the fact that we’re seeing an increased shift to digital medical records – which makes it easy to commit fraud and identity theft.
Given the value of this data on the black market, cyber-attacks are becoming ever more sophisticated in their attempts to hack healthcare institutions.
Ageing infrastructure: Hospitals are melting pots of outdated infrastructure, old operating systems and state-of-the-art medical technology, all communicating over the same networks.
Often, hospitals take an ‘if it’s not broken, don’t fix it’ approach to technology, so devices may not be patched with the latest software versions, for example.
The problem, however, is that the system is very much broken. KPMG found that, in terms of technical capabilities, the healthcare industry is behind other industries when it comes to protecting infrastructure and information.
Complex networks: The fact that so many different people, devices and departments need to access a medical institution’s records forces them to adopt open networks.
Add to this the increasing number of Internet of Things and the myriad Internet-connected gadgets connecting to the network and it becomes difficult to secure and even more vulnerable to attack.
No budget: Security spending in the healthcare industry is at times as little as one-tenth of what other industries spend. When it comes to technology spending, a new MRI machine will likely win the budget lottery over security software.
Easy targets: Ransomware is one of the biggest methods used by cybercriminals to gain access to medical data.
This involves ‘kidnapping’ the data and only releasing it once the hospital pays a ransom. Because medical organisations are generally dealing with crises, they need urgent access to their data and are more willing to pay the ransom to get back up and running as quickly as possible. Cybercriminals know this and are exploiting it.
Lack of understanding and awareness: Although medical institutions are becoming more technologically centric, that’s not to say they’re focusing on technology and there’s a lack of understanding of what’s going on when it comes to cyber security.
There needs to be an increased understanding of how to defend against attacks like ransomware, coupled with a bigger focus on educating staff and users on how to spot phishing attacks – people are, after all, the weakest link in the security chain.
Prevention Is Better Than Cure
It sounds clichéd but, when it comes to security in any sector, prevention certainly is better than cure.
In order to gain a holistic overview of the network, technology managers need to design the infrastructure from the bottom up, starting with the physical layer, comprising devices and other hardware, and working up to the application layer.
This multi-layered approach to security gives IT managers more visibility into the network so that they can see what data is coming into and leaving the network and can implement controls as required.
For example, sensitive patient information can be encrypted as it traverses the network between devices, while less sensitive information, such as that collected by fitness devices, can be subject to less stringent protection measures.
Education of staff members is also critical. They need to be able to identify hacks such as spear phishing and ransomware attempts so that they know not to click on malicious links and to alert the IT department to such attempts.
There also needs to be a general increase in awareness within the healthcare sector of the various methods used by cybercriminals to gain access to medical data. In many cases, medical institutions do not even know that they’ve been infiltrated purely because they don’t know the warning signs. They need to take a more proactive approach to network security and understand how to prevent certain attacks.
Security should not be reactive and should not be done just because organisations want to comply with legislation such as the Protection of Personal Information (POPI) Act.
But unfortunately, this is the case in the healthcare industry and it’s the reason why they are always one step behind the attackers. Rather, security should be about prevention and the desire to ensure the integrity of sensitive information.
Rick Rogers, Area Manager for East and West Africa at Check Point Software Technologies
Federal Airports Authority of Nigeria (FAAN) has announced plans to introduce a biometric identity verification system, known as V-Pass, to speed up passenger processing and enhance security at domestic airports nationwide.
This initiative is aimed at strengthening aviation security, reducing passenger processing time and eliminating dependence on physical identity documents.
A statement issued yesterday by Henry Agbebire, director of Public Affairs and Consumer Protection, FAAN, said the new facial recognition platform, developed in partnership with Verxid Technologies Limited, would enable passengers to verify their identities through biometric authentication, allowing them seamless access through airport security checkpoints and boarding gates.
According to him, the initiative formed the focus of a strategic meeting between FAAN and Verxid Technologies Limited, where both organisations reviewed deployment plans, security safeguards and measures to improve passenger experience.
The statement hinted that the authority centred on ensuring the successful rollout of the digital platform while maintaining high security standards.
The statement quoted, Adebola Agunbiade, director of Commercial and Business Development, FAAN, as describing the V-Pass as another milestone in the authority’s ongoing digital transformation programme.
According to her, the platform indicated FAAN’s commitment to deploying innovative technology that enhances passenger facilitation while reinforcing aviation security across domestic airports.
She assured that the system would provide every traveller with a secure digital identity through a one-time enrolment process.
Under the arrangement, Nigerian passengers would register using their National Identification Number (NIN) alongside facial biometric capture, while foreign travellers would enroll with their passports through Optical Character Recognition (OCR) supported by biometric authentication, the statement added.
FAAN said the system would verify passenger identities before they gain access to restricted airport areas and once again before boarding their flights.
The agency noted that the dual-verification process was designed to prevent identity fraud, impersonation and unauthorised access to airport facilities, while giving security agencies greater confidence in passenger authentication.
Passengers would be able to complete the verification process either through self-service kiosks or with assistance from trained FAAN personnel.
The deployment would also include electronic gates to automate access into controlled areas, reduce queues and improve passenger movement across airport terminals.
According to the developers, first-time registration is expected to take about one minute, while subsequent biometric verification would take less than 30 seconds.
Apart from passenger processing, the V-Pass platform would also provide airlines with secure digital access to flight schedules, passenger manifests and boarding statistics.
FAAN assured travellers that data protection remained a critical component of the project, stressing that the platform fully complies with the Nigeria Data Protection Regulation (NDPR).
The Central Bank of Nigeria (CBN) has launched a new system to monitor how Bureau De Change (BDC) operators buy foreign exchange in the country.
Under the new arrangement, all licensed BDCs must report their foreign exchange purchases through a platform called the FX BDC Purchase Tracker (FXBT). The portal will allow the CBN to monitor transactions in real time or on the same day they take place.
The directive was announced in a circular dated July 15, 2026, and signed by the Director of the CBN’s Trade and Exchange Department, Aderinola Shonekan.
According to the apex bank, the new framework is designed to support its February 2026 policy that allows licensed BDCs to buy foreign exchange directly from authorised dealer banks in the Nigerian Foreign Exchange Market (NFEM).
The CBN said the initiative will improve transparency, strengthen compliance, increase liquidity in the retail forex market, and ensure proper participation by market operators.
A major feature of the framework is the FXBT portal, which will serve as a central database for tracking all foreign exchange purchases made by BDCs from banks.
Under the guidelines, every licensed BDC must register on the platform and submit transaction details either in real time or on the same day the transactions occur.
The CBN stated that the system will help regulators identify violations, detect suspicious transactions, monitor compliance with market rules, and improve confidence in the foreign exchange market.
The framework builds on the CBN’s February 2026 decision to allow licensed BDCs back into the official foreign exchange market. Under that policy, each eligible BDC can purchase up to $150,000 weekly from authorised dealer banks at market rates.
The apex bank said only BDCs with valid licences will be allowed to access foreign exchange through the framework. Operators whose licences have been suspended or restricted due to regulatory issues will not be eligible until those restrictions are lifted.
The CBN also directed banks to carry out thorough Know Your Customer (KYC) and customer due diligence checks before onboarding any BDC. Required documents include valid operating licences, Tax Identification Numbers (TIN), Corporate Affairs Commission (CAC) registration documents, and information on beneficial ownership.
Banks have also been warned not to sell foreign exchange to BDCs that fail to meet the required compliance standards.
To encourage fair competition, the CBN said BDCs can buy foreign exchange from any authorized dealer bank of their choice. Banks are prohibited from forcing BDCs into exclusive arrangements or charging referral fees that limit their ability to transact with other banks.
Under the new process, BDCs must submit electronic requests for foreign exchange through a bank’s designated portal. Banks are required to acknowledge requests within two business hours and communicate approvals or rejections immediately after processing.
Requests can only be rejected for valid reasons, such as incomplete documentation, exceeding weekly purchase limits, unresolved compliance concerns, or internal risk management issues.
The CBN also introduced stricter rules on how purchased foreign exchange can be used. All transactions between banks and BDCs, as well as between BDCs and customers, must be conducted through accounts held with licensed financial institutions. Third-party transactions remain prohibited.
In addition, BDCs are not allowed to keep unused foreign exchange purchased through the official market. Any unused funds must be sold back into the market within 24 hours after the permitted usage period expires.
The apex bank warned that failure to comply could lead to forfeiture of funds and suspension from the market.
BDC operators must also disclose any unused balances from previous allocations when applying for new purchases, while banks are expected to consider those balances when calculating weekly allocations.
Beyond reporting through the FXBT portal, BDCs must continue submitting weekly reports to the CBN. These reports must include details of foreign exchange purchased from banks, sales to end users, unused balances, and settlement records.
The CBN said the reporting requirements will improve transparency and help regulators better monitor foreign exchange flows in the retail market.
The bank warned that violations of the framework could attract penalties under the Banks and Other Financial Institutions Act (BOFIA) 2020 and the Foreign Exchange Act. Sanctions may include fines, suspension from the foreign exchange market, withdrawal of BDC licences, revocation of banks’ authorised dealer status, and referrals to law enforcement agencies where necessary.
The CBN’s Trade and Exchange Department will oversee compliance through regular and surprise inspections carried out in collaboration with other departments.
The apex bank said the new directive is part of its wider efforts to reform the foreign exchange market, improve transparency, boost liquidity, and restore confidence in the system.
Concerns over compliance breaches, speculative trading, and abuse of foreign exchange allocations had continued even after BDCs were reintroduced into the official market earlier this year.
The Corporate Affairs Commission (CAC) has announced the commencement of another exercise to remove 100,000 companies from Nigeria’s register of companies for failing to comply with statutory requirements under the Companies and Allied Matters Act (CAMA), 2020.
In a public notice issued on Thursday, and dated July 15, 2026, the commission said the exercise was being carried out pursuant to Sections 692(3) and 692(4) of the Companies and Allied Matters Act, 2020.
The notice stated: “This is to notify the General Public and Esteemed Customers that the Corporate Affairs Commission has commenced another round of striking off names of companies from the Register pursuant to the provisions of Section 692 (3) and (4) of the Companies and Allied Matters Act, 2020.”
According to the commission, the affected companies are listed on its official website.
“The list of the affected One Hundred Thousand (100,000) companies can be accessed at the Commission’s Website,” the notice said.
The CAC directed all affected companies to update their records by filing outstanding annual returns and beneficial ownership information within 90 days.
“The affected companies are hereby advised to take steps to file all outstanding Annual Returns (and by extension Persons with Significant Control/Beneficial Ownership information) and regularize their records within ninety (90) days of this notice,” the commission said.
It added that companies must send proof of compliance to the designated email address, [email protected], within the stipulated period.
The commission warned that failure to comply would result in the affected companies being removed from the register without any further notice.
“Please note that companies that fail to comply within the stipulated timeline shall be struck off the Register without further notice,” the notice stated.
The CAC reiterated its commitment to improving service delivery, saying, “The Commission remains committed to providing prompt and efficient services to the satisfaction of our valued customers.”
FAAN to Replace Physical ID Check with V-Pass Biometric Verification
World Bank Says 79 Percent of Nigerians Still Trapped in Poverty despite Reforms
SEC Begins Drive to Recover Unclaimed Dividends
ntel Plays Down Calls and Data Services, Moves to BET Agenda
Nigeria Facing Rising Cybercrime Losses – Report
NRC, Ponzi Scheme Collapses Resulting Loss of Billions of Naira
Nigeria Launches FreeTV Nationwide
NASENI Moves to Digitize CCB’s 5m Assets Declaration and Operations
Lebara Nigeria Launches Lebara Play, Africa’s First Telecom-Owned Micro-Drama Platform
CANAL+ Partners Samsung to Pre-Load DStv Stream on New Samsung TVs In Nigeria, Other African Countries
E-Business3 days agoTD Africa Sponsors Check Point Secure 360 Summit to Boost Cybersecurity in Nigeria
Telecom3 days agoMTN Foundation, MUSON Celebrate Emerging Music Talents at 2026 Graduation Ceremony
Telecom3 days agoNITDA Calls for Digital Infrastructure Expansion to Drive Nigeria’s Industrialisation
News3 days agoGuinness Rolls Out Nationwide Consumer Rewards Promotion
E-Financial3 days agoNext Currency Crisis May Turn $300Bn in Stablecoins into National Currencies
E-Financial3 days agoGigbanc Nigerian Fintech Startup Closes Shop after 3 Years
General News3 days agoFirst Trustees Advocates Estate Planning as an Essential Tool in Every Wealth Creation Strategy
Broadcasting3 days agoMbunabo, Nigerian Filmmaker Accuses Ghana TV Stations of Pirating Nollywood Films