Connect with us

E-Business

Mobility: 64% Data Breaches Linked to Identity Theft

Published

on

cyber attack.jpg
Kindly share this post

Security concerns over convergence of personal and workplace identities are on increase, as‎ identity theft accounts for 64% of all data breaches across the globe.

In the latest report by Gemalto, it is revealed that consumer service breaches continue to rise, resulting in almost nine in ten (89%) enterprises addressing their access management security policies.

According to the report, 90% of IT professionals are concerned about employees using their personal credentials for work purposes, even as 62% of enterprises feel increasing pressure to match consumer authentication methods in the workplace.

The use of two-factor authentication is on the rise, with 40% of organizations’ employees using it.

Gemalto, the world leader in digital security, released the findings of its “Authentication and Identity Management Index”, which revealed that 90% of enterprise IT professionals are concerned that employee reuse of personal credentials for work purposes could compromise security.

However, with two thirds (68%) saying they would be comfortable allowing employees to use their social media credentials on company resources, Gemalto’s research suggests that personal applications (such as email) are the biggest worry to organizations.

The enterprise and consumer worlds are merging closer together, with enterprise security teams under increasing pressure to implement the same type of authentication methods typically seen in consumer services, such as fingerprint scanning and iris recognition.

Thus, Gemalto study shows six in ten (62%) believed this was the case, with a similar amount (63%) revealing they feel security methods designed for consumers provide sufficient protection for enterprises.

In fact, over half of respondents (52%) believe it will be just three years before these methods merge completely.

Employee expectations around usability and mobility are affecting how enterprises approach authentication and access management.

Nearly half of respondents stated that they are increasing resources and spending on access management.

Deployment rates are also increasing:  62% expect to implement strong authentication in two years’ time – up from 51% of respondents who said the same thing last year, and nearly 40% responded they will implement Cloud SSO or IDaaS within the next two years.

Enterprises are clearly seeing the benefits, with over nine in ten (94%) using two-factor authentication to protect at least one application and nearly all respondents (96%) expecting to use it at some point in the future.

Mobility security still a challenge, says the report. As more enterprises become mobile, the challenges in protecting resources while increasing flexibility for employees working on the move increases.

Despite an increasing amount of businesses enabling mobile working, a third (35%) completely restricted employees from accessing company resources via mobile devices and nine in ten (91%) are at least part-restricting access to resources.

This is backed up as half of businesses (50%) admit security is one of their biggest concerns to increasing user mobility.

In order to protect themselves against threats from increased mobility, enterprises are still most likely to be using usernames and passwords – two thirds of users at respondents’ organizations are using this authentication method, on average.

Currently, 37% of users at respondents’ organizations are required to use two-factor authentication to access corporate resources from mobile devices, on average. However, like the rise for access while in the office, on average, respondents believe this will increase to over half (56%) in two years’ time.

“From credential sharing to authentication practices, it’s clear that consumer trends are having a big impact on enterprise security,” said François Lasnier, Senior Vice President, Identity Protection at Gemalto. “But businesses need to make sure their data isn’t compromised by bad personal habits. It’s encouraging to see deployment of two-factor authentication methods on the rise, and increased awareness for cloud access management, as these are the most effective solutions for businesses to secure cloud resources and protect against internal and external threats. For IT leaders, it’s important that they keep pushing for security to be a priority at the board level, and ensure that it’s front of mind for everyone in an organization.”‎

‎Reacting to the report, Mr. Olufemi Ake, country manager, ESET West Africa told Nigeria CommunicationsWeek confirmed that the ‎uptake of Bring Your Own Device (BYOD)‎ in the region is one of the primary factors leading to breaches.

Ake said in a telephone interview “In fact, this report is factual based on our experiences with clients in this region. In as much as BYOD offers organizations flexibility in workplace, it is also creating challenges, especially when the device was not checked for malicious content right from the beginning.

“Employees now access and process company data even from home, most times, using personal emails. It is difficult to manage, unless you mandate them, right from the time of recruitment, on how company data must not be used.

“This has given rise to security solutions like Safetica which helps to monitor devices; how files are moved from the computer, uses or reused and for what purpose”.

He added that the report implies ‎companies must not relent with regards IT security in the coming year and moving forward.

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Business

Jumia CEO says Black Friday Signals Nigeria’s E-Commerce Maturity

Published

on

Kindly share this post

At the close of 2025, Temidayo Ojo, the CEO of Jumia Nigeria, reflected on a year-end shopping season that points to the growing maturity of the country’s e-commerce market. “Black Friday is no longer a single, short-lived spike in activity,” he said.

“It has become a familiar, anticipated moment in the retail calendar, where consumers shop deliberately and with confidence.”

Preliminary KPIs for the two months ended November 30, 2025, show strong year-on-year growth in both orders and Gross Merchandise Value (GMV), with GMV growth outpacing order growth. This indicates that customers are placing fuller, more considered baskets rather than shopping in fragmented transactions. Nigeria ranked among Jumia Group’s better-performing markets, with engagement remaining steady throughout the Black Friday period rather than spiking briefly and tapering off.

A key factor behind this performance is the growing familiarity of consumers with online shopping. Customers are increasingly leveraging platform features such as saved carts, brand stores, and price comparison tools to plan purchases in advance. This trend suggests that digital commerce is becoming embedded in everyday habits rather than being viewed as a one-off event.

Ojo also highlighted the role of Jumia’s JForce network in connecting digital commerce to local communities. “Our agents are critical to ensuring that customers across Nigeria, including secondary cities and smaller communities, have access to variety, consistent pricing, and reliable delivery,” he said. “During peak periods like Black Friday, JForce agents can respond faster, serve more customers efficiently, and build stronger local relationships. This isn’t just a distribution channel—it’s a pathway to sustainable income and inclusion.”

Reflecting on the overall performance, the CEO concluded: “What we’re seeing this year-end is steady engagement across categories, stronger consumer confidence, and partners like our JForce agents benefiting from increased activity.

“It confirms that Nigeria’s e-commerce ecosystem is maturing, growing in a more structured and resilient way. As the December Holiday Sale continues, we expect these patterns of familiarity, trust, and participation to sustain momentum and drive both commerce and community impact across the country.”


Kindly share this post
Continue Reading

E-Business

Galaxy Backbone Tops FG’s Website Performance Ranking

Published

on

Kindly share this post

Galaxy Backbone Limited (GBB) has been ranked first overall in the 2025 Federal Government Website Performance Scorecard.

Galaxy Backbone Tops FG's Website Performance Ranking

This is a landmark achievement for Nigeria’s digital economy.

The ranking, conducted by the Bureau of Public Service Reforms (BPSR), is the definitive benchmark for digital excellence and transparency across all Ministries, Departments, and Agencies (MDAs).

Professor Ibrahim Adepoju Adeyanju, managing director and CEO of Galaxy Backbone, received the award during a ceremony in Abuja.

He described the feat as a validation of the agency’s“Nigeria First”data sovereignty strategy and its relentless pursuit of service excellence.

This recognition comes as the Federal Government intensifies its push to achieve a fully paperless civil service by December 31, 2025.

GBB has been the primary architect of this transition through its 1Gov Enterprise Content Management (ECM) platform, which now hosts the operations of almost all federal MDAs.

The award adds to a growing list of accolades for Galaxy Backbone in 2025, following its recent win of the “International Standard Excellence Award for Best IT Service Provider.”

As the central hub for government shared services, GBB’s performance serves as a blueprint for other agencies currently undergoing digital transformation.

With its expanded fiber-optic backbone now covering over 13 states and its secure cloud solutions, Galaxy Backbone remains the cornerstone of Nigeria’s vision to become a leading digital nation by the end of the decade.

 


Kindly share this post
Continue Reading

E-Business

Nigeria Police Arrest Okitipi, Nigerian Allegedly Linked to Microsoft 365 Hack

Published

on

Kindly share this post

Okitipi Samuel, a Nigerian man, has been taken into custody by the Nigeria Police Force for his alleged role in a global cyberattack on Microsoft 365 users.

Nigeria Police Arrest Okitipi, Nigerian Allegedly Linked to Microsoft 365 Hack

Benjamin Hundeyin, Force public relations officer, disclosed this on Thursday in Abuja while briefing journalists on the outcome of investigations carried out by the National Cybercrime Centre of the Nigeria Police Force.

Hundeyin said the centre, under the leadership of Ifeanyi Uche, its director and Commissioner of Police, commenced investigations in collaboration with Microsoft, the Federal Bureau of Investigation, the United States Secret Service, and the United Kingdom’s National Crime Agency.

According to him, investigations revealed that a phishing toolkit known as “Raccoon 0365” was used to create fake Microsoft login portals to harvest user credentials and unlawfully access email accounts belonging to corporate organisations, financial institutions, and educational institutions in several countries.

“This investigation commenced following credible intelligence received from Microsoft USA through the FBI, indicating that a malicious phishing toolkit known as Raccoon0365 was being used to create fake Microsoft login portals, harvest user credentials, and unlawfully access the email accounts of corporate organisations, financial institutions, and educational establishments,” Hundeyin said.

He added that between January and September 2025, several reports of unauthorised access to Microsoft 365 accounts were traced to phishing emails designed to mimic legitimate Microsoft login pages, enabling business email compromise, internal phishing, data breaches, and other cyber-enabled fraud.

Hundeyin said digital forensic analysis and cryptocurrency tracing identified wallets connected to the illegal operation.

He noted that operatives were deployed to Lagos and Edo states, leading to the arrest of three suspects identified as Joshua, James, and Okitipi Samuel between September 20 and October 4, 2025.

“Following extensive digital forensic and technical intelligence analysis, the centre conducted cryptocurrency tracing that identified suspicious wallets connected to cash-out schemes.

“Acting on actionable intelligence, operational teams were deployed to Lagos and Edo states, resulting in the arrest of Joshua, James, and Okitipi Samuel. Searches at their residences led to the recovery of mobile devices, laptops, and other digital exhibits linked to the fraudulent scheme,” he said.

Hundeyin identified Okitipi Samuel, also known as “0365” and Moses Felix as the principal suspect and developer of the phishing infrastructure.

“The primary suspect, Okitipi Samuel, also known as Moses Felix, has been identified as the developer and operator of the phishing infrastructure. Investigations revealed that he managed a Telegram channel used to sell phishing links in exchange for cryptocurrency and hosted fake login pages on Cloudflare using stolen or fraudulently obtained email addresses,” he said.

He added that investigations confirmed Samuel unlawfully used the email details of one of the arrested individuals without consent to register some of the accounts used in the operation.

The police spokesperson said further investigations revealed that the identities of Joshua and James were used without their consent.

“There was no evidence linking them to the creation or operation of the phishing scheme. They were victims of identity theft,” Hundeyin said.

He said a prima facie case had been established against Samuel for identity theft, unlawful access to computer systems, creation and distribution of malicious software, unauthorised interference with network data, and aiding and abetting fraud.

Hundeyin added that the suspect would be charged under relevant provisions of the Cybercrimes (Prohibition, Prevention, etc.) Act, 2024.

He said the suspect would be prosecuted in Nigeria, noting that the country has the capacity to enforce its cybercrime laws, although extradition could be considered if formally requested through due process.

Hundeyin assured Nigerians that the police, under the leadership of Kayode Egbetokun, inspector-general of Police,  would continue to protect the country’s digital ecosystem and urged citizens to practise good cyber hygiene by being cautious when clicking links and sharing personal information online.

Speaking separately, Ifeanyi Uche, director of the National Cybercrime Centre,  urged Nigerians to exercise caution online.

Uche advised members of the public to avoid clicking on links from unknown or unexpected sources, noting that such links often contain malware or phishing tools designed to compromise devices and personal data.

He warned that indiscriminate clicking of links or responding to unsolicited emails could lead to unauthorised access to personal and corporate accounts, urging citizens to “wash their cyber hands” by verifying sources before taking action online.


Kindly share this post
Continue Reading

Trending