2026 Sterling Bank (Nigeria) — NDPC investigation (alleged ~900K accounts; ByteToBreach; Apr 1)
Data compromised
Alleged banking PII/financial records per forum and press summaries—subject to investigation
Technical writeup
Alongside Remita, Sterling Bank Plc was named in Nigeria Data Protection Commission (NDPC) investigative notices dated April 1, 2026, after online allegations that large volumes of Nigerian banking customer and employee data—including fields such as BVNs, account details, and transaction histories—had appeared in criminal forums. Secondary reporting cited unverified figures on the order of hundreds of thousands to roughly one million customer records; NDPC emphasized fact-finding on scope, risk to data subjects, and organizational measures. No court judgment or bank admission confirming equivalent exfiltration was cited in early trade press at listing time. See remita2026-ndpc for the same regulatory inquiry framing.
Root cause
Under regulatory investigation; alleged unauthorized access per threat claims