The Nigeria Data Protection Commission (NDPC) has issued an urgent regulatory advisory following a technical assessment that revealed coordinated cyber threats targeting the nation’s financial systems and critical digital infrastructure.

In a statement signed by the Commission’s Head of Legal, Enforcement, and Regulations, Babatunde Bamigboye, the NDPC warned that “shadowy threat actors” are actively working to compromise Nigeria’s data security architecture.

The advisory reminded public establishments of President Bola Tinubu’s directive likening data to “the new oil.” The President has mandated all Ministries, Extra-Ministerial Departments, and Agencies (MDAs) to rigorously safeguard information in accordance with the Nigeria Data Protection Act (NDPA) 2023.

To mitigate these escalating threats, the NDPC is directing all Data Controllers and Processors—including private firms and government agencies—to “urgently step up” their technical and organisational safeguards.

Key requirements listed in the advisory include: Identity Controls: Deployment of Multi-Factor Authentication (MFA) and Zero-Trust architecture; System Hardening: Immediate patching of vulnerabilities and continuous network segmentation; Compliance: Appointment of certified Data Protection Officers (DPOs) and conducting Data Privacy Impact Assessments (DPIAs).

Others are infrastructure security: Hardening of APIs, cloud systems, and databases, alongside regular penetration testing (VAPT).

“Organisations that fail or neglect to implement appropriate measures as required under the Nigeria Data Protection Act, 2023 may incur legal liabilities,” the Commission warned.

MEANWHILE, MTN Nigeria has temporarily suspended its popular airtime and data credit service, Xtratime, as it aligns with new regulatory requirements governing digital lending issued by the Federal Competition and Consumer Protection Commission (FCCPC).

The telecoms firm disclosed the development in a notice to the Nigerian Exchange (NGX) yesterday, stating that the pause is part of efforts to comply with the Digital, Electronic, Online or Non-Traditional Consumer Lending Regulations, 2025.

The Xtratime service, widely used by subscribers to borrow airtime or data and repay on their next recharge, has become a fallback option for millions of users during periods of financial constraint.

In the statement signed by the company secretary, Uto Ukpanah, MTN said the suspension was necessary to enable the company to implement processes required under the new regulatory framework.