E-Business
Nigeria Cyberattacks: Stronger Collaboration as a Panacea
A series of recent cybersecurity incidents affecting financial institutions, government-linked platforms, and fintech operators is beginning to reveal a pattern that can no longer be ignored. What may have initially appeared as isolated breaches is now raising deeper concerns about a broader and possibly coordinated threat landscape targeting the country.
At the heart of this conversation is a critical shift in perspective. Cybersecurity incidents must no longer be viewed as problems belonging to individual organisations. They represent a national risk. The growing frequency and spread of these attacks suggest that no institution is immune, and more importantly, that those not yet affected cannot afford complacency. For organizations that have not experienced any disruption, this is not a moment for reassurance. The emerging pattern suggests it may only be a matter of time.
The growing concern follows a wave of alleged cyber incidents targeting organizations across banking, fintech, government, insurance, and education sectors, raising fears that sensitive data belonging to millions of users may be at risk.
At the centre of the unfolding situation are bank customers, fintech users, government workers, and students, whose personal and financial information could be exposed if the claims are substantiated. What initially appeared as isolated breaches is now being viewed as a potentially broader and more coordinated threat affecting Nigeria’s digital infrastructure.
Against this backdrop is a post by @TrendingEx on X (formerly Twitter), which claimed that more than 3TB of sensitive data linked to multiple Nigerian organizations had been published online. The post listed entities including Remita, Sterling Bank, Zenith Bank, the Oyo State Government, Leadway Assurance, GetBumpa, and Ahmadu Bello University, alongside more than 30 other companies.
Beyond these cases, the breadth of organizations named has raised deeper concerns about systemic exposure. The entities span financial services, public sector systems, insurance providers, fintech platforms, and academic institutions, suggesting that attackers may be probing shared weaknesses rather than targeting single organizations in isolation.
Cybersecurity incidents of this nature typically involve attackers exploiting technical vulnerabilities or misconfiguration to gain access, followed by the extraction of sensitive data. Such data is often used for extortion, fraud, or public leaks. In some cases, the scale of access may be overstated, but even limited breaches can have far-reaching consequences when systems are interconnected.
What makes the current situation particularly concerning is not just the incidents themselves, but their apparent timing and spread. The near-simultaneous emergence of cybersecurity concerns across banking, fintech, and public sector systems suggests a broader systemic vulnerability. From institutions such as Flutterwave to Fidelity Bank, past and recent incidents continue to illustrate that no segment of the ecosystem is insulated from risk.
Cybercriminal tactics in these scenarios often follow a familiar pattern. Attackers typically seek to gain initial access through technical vulnerabilities or misconfiguration. Once inside, they may attempt to extract sensitive data which is then used as leverage. In many cases, organizations are approached with demands, with the threat of public exposure if compliance is not met.
However, not all claims made by threat actors are accurate. In some instances, attackers exaggerate the scale of their access to increase pressure. A breach involving a limited number of records may be presented as a compromise affecting millions. This strategy is designed to create panic, attract attention, and force quicker responses from targeted organizations.
In response to rising cyber risks, the Central Bank of Nigeria has introduced a mandatory cybersecurity self-assessment for banks and financial institutions, signalling tighter regulatory scrutiny across the sector.
At the policy level, the Minister of Communications, Innovation and Digital Economy has also emphasized the importance of collaboration in strengthening national cyber resilience, highlighting the need for stronger coordination between government and the private sector.
Despite these developments, experts warn that the public narrative must be handled carefully. Focusing solely on individual organisations risks overlooking the broader issue of systemic vulnerability. More importantly, isolating affected institutions could discourage transparency and delay information sharing, both of which are critical in responding effectively to cyber threats.
The wider implication is that cybersecurity incidents can no longer be treated as isolated corporate challenges. As digital systems become increasingly interconnected, a breach in one organization can have ripple effects across multiple sectors, undermining trust in the broader digital economy.
For individuals, the risks are immediate and tangible. Data breaches can expose personal information, enabling identity theft, financial fraud, and targeted cyberattacks. This makes vigilance essential not just for institutions, but for everyday users who rely on digital platforms.
While the full extent of the alleged breaches remains unclear, the pattern of claims, their timing, and the range of organizations involved point to a critical moment for Nigeria’s cybersecurity landscape.
Whether these incidents are ultimately confirmed or not, they underscore a growing reality: in an interconnected digital environment, the security of one organization is closely tied to the security of all.
Gbolabo Awelewa, chief Business Officer, Esentry, said that industry-wide collaboration is critical. Cyberattacks targeting banks and payment platforms are becoming more coordinated and sophisticated, and no single organization can address them alone.
“Stronger collaboration between financial institutions, fintechs, regulators, and cybersecurity providers will enable faster threat intelligence sharing and a more unified response to emerging risks.
“At esentry, we see first-hand how proactive security measures make a significant difference. Organizations need continuous monitoring of their infrastructure, regular vulnerability assessments, stronger identity and access management, and real-time threat detection capabilities to identify and respond to attacks before they escalate.
“Beyond technology, institutions must also prioritize resilience; ensuring they can detect, respond to, and recover quickly from incidents.
“Ultimately, cybersecurity today is an ecosystem challenge, and organizations that combine strong security frameworks with industry collaboration will be better positioned to stay ahead of evolving threats,” he stated.
However, there is a growing concern that public discourse may be drifting in the wrong direction. Focusing on blame or singling out affected organisations risks undermining collective security. When institutions are publicly isolated, it may discourage transparency and delay critical information sharing, both of which are essential in responding to cyber threats effectively.
More importantly, a fragmented approach can embolden attackers. When threat actors perceive a lack of unity, they are more likely to expand their activities, targeting additional organizations and exploiting systemic weaknesses. This makes it imperative for stakeholders to adopt a unified stance.
The current moment calls for a shift from reaction to coordination. Regulators, private sector players, and cybersecurity professionals must work together to build a shared defence framework. This includes timely information sharing, joint incident response strategies, and consistent enforcement of security standards across the ecosystem.
For the public, the implications are equally significant. Data breaches are no longer abstract technical events. They carry real-world risks, including identity theft, financial fraud, and targeted social engineering attacks. As such, awareness and vigilance must extend beyond institutions to individual users who interact with digital platforms daily.
Ultimately, the message is clear. Nigeria’s cybersecurity challenges cannot be addressed in isolation. Whether the threat originates from within or outside the country, its impact is collective. Every breach, regardless of where it occurs, has the potential to weaken trust in the broader digital economy.
Nigeria is at risks losing digital control of its cyberspace following the alarming surge in cyberattacks in the country.
The surge show a dangerous shift from opportunistic cybercrime, facing approximately 4,710 threats weekly and ranking as a top target for cybercriminals in Africa.
Nigeria Internet Registration Association (NiRA) recently warned that the trend weakens the country’s control over its digital identity and limits economic gains from its expanding online ecosystem.
Speaking at the .ng Media Advocacy and Capacity Building Initiative for the Nigerian Information Technology Reporters Association (NITRA), organised by NiRA in Lagos, Adesola Akinsanya, president, NiRA, questioned who truly owns Nigeria’s digital presence, stressing that the answer lies in deliberate choices regarding domain name adoption and the narratives shaping the country’s digital ecosystem.
He likened the widespread adoption of foreign domains to building assets on land owned by others, where control, legal authority, and economic benefits ultimately reside outside the country.
According to him, many Nigerian businesses operating on domains such as .com are effectively anchoring their digital operations on infrastructure beyond national control.
Industry stakeholders at the event noted that while Nigeria’s digital economy continues to expand driven by increasing internet penetration and a vibrant tech ecosystem a significant portion of the value generated is lost through payments tied to foreign domain registration and hosting services.
Seyi Onasanya, chief operating officer, NiRA, described domain names as “digital real estate,” emphasizing their role as a foundational layer of the modern economy.
She stated that countries that prioritise local domain systems are better positioned to retain value, strengthen trust, and enhance digital competitiveness.
Onasanya added that although country-code domains account for nearly 40 percent of global domain registrations, Nigeria still records relatively low adoption of its .ng domain despite its large population and millions of small and medium enterprises.
Experts at the forum warned that dependence on foreign domains contributes to capital flight, weakens national branding, and exposes businesses to external regulatory risks.
They stressed that every domain name represents a potential economic asset linked to transactions, jobs, and overall GDP growth.
Beyond economic implications, speakers highlighted trust and security as critical issues.
Ridwan Badmus, legal and cybersecurity expert, noted that Nigeria’s regulatory framework is evolving to support a more secure digital environment, including policies encouraging government institutions to adopt local domains and hosting services.
He explained that the .ng domain benefits from enhanced security features such as DNS Security Extensions (DNSSEC) and improved monitoring systems, which strengthen resilience against cyber threats.
Chartered Institute of Bankers of Nigeria (CIBN), the country’s apex professional body for bankers, is reportedly at the centre of a major cybersecurity incident following claims that its internal database estimated at about 250GB has been compromised and leaked online by an unidentified threat actor, according to the Guardian.
The alleged breach, which surfaced recently on underground cybercrime forums, is said to involve a wide range of sensitive institutional and personal data belonging to members of the banking profession.
According to preliminary assessments of sample files circulating online, the exposed information reportedly includes full names, email addresses, phone numbers, residential and business addresses, membership records, scanned identification documents, certificates, and even internal source codes linked to digital systems.
While the authenticity of the full dataset has not been independently verified, cybersecurity observers note that the scale of the alleged leak is consistent with a growing pattern of attacks targeting financial institutions and professional bodies across Nigeria’s banking ecosystem.
Chartered Institute of Bankers of Nigeria, established in the early 1960s and chartered to regulate banking professionalism in the country, plays a central role in setting ethical and educational standards for bankers nationwide.
It counts major financial institutions, including the Central Bank of Nigeria and commercial banks, among its corporate members.
In recent years, the institute has itself acknowledged rising cyber risks affecting the financial sector, warning that banks and related institutions face increasing exposure to digital attacks, including website hijacking, ransomware threats, and data breaches targeting sensitive financial information.
This latest allegation adds to a series of reported cyber incidents involving Nigerian financial institutions, where attackers have increasingly focused on exploiting personal data for identity theft and phishing schemes.
Cybersecurity analysts say Nigeria has witnessed a broader surge in data breaches across banking, telecoms, and government systems, with millions of records reportedly circulating on the dark web in recent years.
The alleged CIBN breach, if confirmed, would further highlight vulnerabilities in institutional data protection frameworks and the growing sophistication of cybercriminal operations targeting financial ecosystems.
However, CIBN has not issued an official confirmation or denial regarding the alleged breach.
But, the need for immediate forensic investigation, member notification protocols, and a comprehensive audit of the institute’s digital infrastructure cannot be overlooked.
Authorities and data protection regulators are also expected to assess the claims as part of broader efforts to curb escalating cyber threats within Nigeria’s financial services sector.
E-Business
Kaspersky MDR Introduces Major Updates, Strengthening Detection and Investigation Capabilities
Kaspersky Managed Detection and Response now offers enhanced automation and incident management features, introduces a new offering for industrial and embedded systems, and delivers an improved customer experience. These advancements bolster security and enable a faster, more efficient response to threats.
Kaspersky MDR is adopted by organisations across a vast range of industries worldwide. In 2025, the solution detected up to three high-severity incidents driven by human activity daily, reducing response time by approximately 22% compared to the previous year.
This result, highlighted in a Global Report by Kaspersky Security Services, reflects enhanced efficiency driven by advanced automation, increased detection rules and the continuously perfected and dedicated expertise of Kaspersky’s specialists.
Keeping in mind that threats are becoming increasingly sophisticated and challenging to detect, Kaspersky recognises that solutions must be continuously refined. This principle is also applied to Kaspersky MDR, which is now being enhanced through a series of important updates designed to improve its value and deliver a better experience for customers.
New MDR offering for embedded and industrial systems
Kaspersky Embedded Systems Security 4.0 (KESS) and KICS for Nodes 4.5 now features a unified MDR agent. For embedded environments, this integrated approach simplifies onboarding and enhances manageability, enabling faster and more dependable MDR deployment. In industrial settings, it decreases operational complexity, strengthens resilience, and streamlines ongoing maintenance.
Enhanced detection and investigation capabilities
Kaspersky MDR now benefits from enhanced container telemetry provided by Kaspersky Endpoint Security for Linux 12.4. This advancement significantly improves visibility into containerised environments, boosts threat detection accuracy, and accelerates the identification of risks within container infrastructures.
Kaspersky MDR now also supports automated file transfers upon analyst request through Kaspersky Anti Targeted Attack 8.0 and Kaspersky Next EDR Expert 8.0. With advanced MDR integration enabled, relevant files are shared automatically, eliminating manual end-user actions. This streamlines collaboration, accelerates incident investigations, and enables faster responses to targeted attacks.
MDR incidents can now be escalated directly from the MDR portal to the Kaspersky Global Emergency Response Team for comprehensive investigation and response. This capability ensures end-to-end management of complex cyberattacks, from the initial response and evidence collection to identifying the primary attack vector and developing an effective mitigation plan.
MDR incidents can now be automatically exported to Kaspersky SIEM 4.0 for advanced analysis and correlation with other security events. This enhancement expands investigative capabilities while maintaining MDR as the central hub for incident management and response.
Enhanced accessibility and customer experience
A one-click incident escalation from Kaspersky Next EDR Expert to MDR is now available, empowering customers with greater control over incident management and ensuring rapid access to expert analysis and response guidance.
Kaspersky MDR now also provides enriched incident notifications via Telegram that allow real-time updates with priority levels, affected assets, tailored recommendations, and direct links to incidents, enabling customers to access vital information instantly without the need to log into the portal.
Furthermore, the MDR portal has been fully optimised for mobile devices and tablets, offering comprehensive access to all core functionalities. These improvements collectively allow customers to monitor incidents and manage their MDR services anytime and anywhere, thereby significantly increasing responsiveness and operational agility.
“At Kaspersky, we are committed to continuously enhancing our MDR to stay ahead of evolving cyber threats and protect organisations worldwide from all industries, 24/7. These latest updates bring extended integrations with the Kaspersky product portfolio, smarter automation and new features that enable quicker and even more precise responses – all to improve user experience because in today’s threat landscape, agility and precision are more critical than ever,” comments Renat Turianov, Kaspersky MDR Product Owner at Kaspersky.
Nnaji, Former Minister Seeks Out-of-court Settlement over Certificate Forgery Allegations
Nigeria @ Risks Losing Digital Control- NiRA
CIBN Allegedly Hit by 250GB Data Breach
NUJ Accuses NBC of Attempting to Gag Media, Demands Dialogue
BOI, RMRDC Seal MoU to Address Agric Value Chain Challenges, Boost Nigeria’s GDP
NBC Boss Urges Content Ceators to Participate in DSO
NITDA Takes Over National Digital Architecture System
DLM SPV PLC Lists ₦9.00bn AAA-Rated Medium-Term Notes on FMDQ Exchange, Sets Benchmark in Corporate Bond Market
FG Shifting Focus to “Meaningful Connectivity” to Drive Inclusion – Minister
Jury Finds Meta, Google Liable for Woman’s Social Media Addiction
E-Business2 days agoLagos Unveils Cybersecurity Guidelines to Tackle Rising Digital Threats
Telecom2 days agoNBC Warns Broadcasters Against Bullying Guests, Passing Opinions as Facts
News2 days agoFG Borrows N100Bn from Unclaimed Dividends, Dormant Bank Accounts
E-Financial2 days agoCitiTrust Heads to Appeal Court over Alleged Ponzi Scheme
Telecom2 days agoWATRA Secretary sees Resilience as a Critical Link in West Africa’s Digital Economy
Telecom2 days agoWhy Nigeria Must Embrace .ng Now – NiRA Reveals Five Critical Steps
Telecom2 days agoTech Shake-Up: Snap Cuts Hundreds as AI Drives Efficiency Push
News2 days agoFG Carpets W/Bank, Denies Alleged Diversion of Federation Revenue