The Nigeria Data Protection Commission (NDPC) has launched an investigation into an alleged data breach involving financial technology firm Remita Payment Services Ltd. and Sterling Bank, officially commencing on April 1, 2026. This probe aims to ascertain the extent to which personal and financial data of millions of Nigerians may have been compromised within the digital payment ecosystem. The NDPC has served "Notice of Investigation" and is interrogating relevant parties to determine the nature and scope of the breach, emphasizing the legal requirement for data subjects to be protected by appropriate technical and organizational measures. National Commissioner Dr. Vincent Olatunji has also directed the investigation to be broadened to include other digital payment system users, warning that non-compliant entities will face legal consequences. The investigation follows claims by a dark web hacker, Bytetobreach, who asserted responsibility for breaching Remita and Sterling Bank, alleging access to millions of customer accounts and employee records containing sensitive information.