What Happened
Remita, operated by SystemSpecs and used by the Nigerian government for salary payments and contractor disbursements, experienced a significant data breach. Attackers gained unauthorized access to the platform's backend systems, exposing sensitive records of millions of Nigerians.
What Data Was Exposed
Reports indicate that the breach exposed full names, Bank Verification Numbers (BVN), National Identification Numbers (NIN), bank account details, transaction histories, and government employee records. This represents one of the most sensitive data leaks in Nigerian financial history.
Who Is Affected
The breach affects civil servants across all tiers of government, pensioners receiving payments through the platform, contractors and vendors registered on the federal payment system, and individuals who have made utility or tax payments through Remita.
Government Response
The Central Bank of Nigeria (CBN) and the Nigeria Data Protection Commission (NDPC) have been notified. SystemSpecs released a statement acknowledging the incident and claiming that security measures have been reinforced, though details remain vague.
What You Should Do
All Nigerians who have used Remita should immediately monitor their bank accounts for unauthorized transactions, consider placing a fraud alert with their banks, and be extremely cautious of phishing attempts using their leaked personal information.