Sterling Bank: NDPC Investigates Remita and Sterling Bank Over Alleged Data Breach

NDPC Launches Investigation into Alleged Data Breach Involving Remita and Sterling Bank

The Nigeria Data Protection Commission (NDPC) has initiated an investigation into a suspected data breach involving Remita Payment Services Ltd, Sterling Bank, and associated entities. The probe, announced in a press release on April 5, 2026, follows the issuance of a Notice of Investigation on April 1, 2026, as part of the NDPC’s regulatory procedures.

The investigation aims to determine the scope and nature of the breach, including the types of personal data exposed, the risks to affected individuals, and the adequacy of mitigation measures. The NDPC will also assess whether the involved organizations complied with technical and organizational safeguards required under the Nigeria Data Protection Act (2023).

National Commissioner Vincent Olatunji has directed broader scrutiny of digital payment systems lacking sufficient data protection measures, reinforcing the NDPC’s mandate to enforce compliance and bolster trust in Nigeria’s digital and financial services sector. The probe underscores the Commission’s commitment to safeguarding data integrity amid the country’s expanding digital economy.

Source: https://techafricanews.com/2026/04/07/ndpc-investigates-remita-and-sterling-bank-over-alleged-data-breach/

Sterling Bank cybersecurity rating report: https://www.rankiteo.com/company/sterling-bank

"id": "STE1775583183",
"linkid": "sterling-bank",
"type": "Breach",
"date": "4/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Financial Services',
                        'location': 'Nigeria',
                        'name': 'Remita Payment Services Ltd',
                        'type': 'Payment Services'},
                       {'industry': 'Financial Services',
                        'location': 'Nigeria',
                        'name': 'Sterling Bank',
                        'type': 'Bank'}],
 'data_breach': {'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Personal data'},
 'date_publicly_disclosed': '2026-04-05',
 'description': 'The Nigeria Data Protection Commission (NDPC) has initiated '
                'an investigation into a suspected data breach involving '
                'Remita Payment Services Ltd, Sterling Bank, and associated '
                'entities. The probe aims to determine the scope and nature of '
                'the breach, including the types of personal data exposed, the '
                'risks to affected individuals, and the adequacy of mitigation '
                'measures.',
 'impact': {'data_compromised': 'Personal data',
            'identity_theft_risk': 'High',
            'systems_affected': 'Digital payment systems'},
 'investigation_status': 'Ongoing',
 'references': [{'date_accessed': '2026-04-05',
                 'source': 'NDPC Press Release'}],
 'regulatory_compliance': {'regulations_violated': 'Nigeria Data Protection '
                                                   'Act (2023)',
                           'regulatory_notifications': 'Notice of '
                                                       'Investigation issued '
                                                       'on 2026-04-01'},
 'title': 'NDPC Investigation into Alleged Data Breach Involving Remita and '
          'Sterling Bank',
 'type': 'Data Breach'}