NDPC investigates Remita Sterling Bank data breach

NDPC probes alleged Remita data breach involving Sterling Bank

Abdullateef Fowewe

The Nigeria Data Protection Commission (NDPC) has initiated an investigation into a suspected data breach affecting Remita Payment Services Ltd., Sterling Bank, and other entities, as announced in an official statement today.

The statement, signed by Babatunde Bamigboye, Head of Legal, Enforcement & Regulations, confirms that a Notice of Investigation was served on April 1, 2026, in line with NDPC procedures.

It notes that “relevant parties and individuals have been providing information for the purpose of addressing the incident.”

The probe aims to safeguard data subjects through robust technical and organisational measures.

Key areas under scrutiny include “the types of personal data involved, the nature and scope of the alleged breach, the risk to data subjects and the mitigation measures carried out where a breach is confirmed.”

NDPC’s National Commissioner/CEO, Dr Vincent Olatunji, has escalated the matter, directing a broader review: “organisations that employ digital payment systems without putting in place appropriate technical and organisational measures as mandated under the Nigeria Data Protection Act, 2023 (NDP Act), will also be examined as part of a wider effort to ensure the integrity of the ecosystem.”