2026 Temu Nigeria — NDPC investigation (~12.7M data subjects cited; alleged NDP Act issues)
Data compromised
Scope under investigation; press cited national-scale user data processing
Technical writeup
In February 2026, Nigeria’s National Data Protection Commission (NDPC) launched a regulatory investigation into Temu’s processing of personal data in Nigeria, with Nigerian press reporting figures on the order of ~12.7 million Nigerian data subjects and concerns spanning transparency, cross-border data transfers, accountability, and surveillance-style data practices. This is a regulatory enforcement matter rather than a single confirmed hacker exfiltration; outcomes and any formal findings remained pending in early reporting. NDPC publicly warned processors about compliance with the Nigeria Data Protection Act.
Root cause
Regulatory investigation; alleged data-protection law violations per NDPC (not a confirmed single ransomware breach)