NDPC probes data breach at Remita, Sterling Bank, others

The Nigeria Data Protection Commission (NDPC) has begun an investigation into an alleged data breach involving Remita Payment Services Limited, Sterling Bank, and other institutions.

The NDPC Head of Legal, Enforcement and Regulations, Babatunde Bamigboye, made this known via a statement issued on Monday, April 6, 2026.

Bamigboye said a notice of investigation was served on April 1, in line with the commission’s procedures.

Bamigboye said relevant parties and individuals have since been providing information to aid the investigation and address the incident.

He stressed that the investigation aims to ensure that data subjects are protected with appropriate technical and organisational measures.

“The investigation by NDPC covers, among others, the types of personal data involved, the nature and scope of the alleged breach, the risk to data subjects and the mitigation measures carried out where a breach is confirmed,” he stated.

The National Commissioner of NDPC, Dr Vincent Olatunji, also said organisations deploying digital payment systems without adequate safeguards would come under scrutiny.

He added that such measures were mandated under the Nigeria Data Protection Act 2023 as part of efforts to ensure the integrity of the ecosystem.