Morganable Technology | Digital Risk
Nigeria recorded 281,500 leaked accounts in the first quarter of 2026, highlighting the growing cybersecurity risks facing individuals and organisations across the country.
Lagos —
Nigeria’s digital space is facing renewed pressure as cyber threats continue to expose personal information and put users at risk of fraud, identity theft and account takeovers.
A report by cybersecurity company Surfshark showed that 281,500 Nigerian user accounts were leaked between January and March 2026. The figure placed Nigeria 34th among the countries with the highest number of reported breaches globally during the period.
Globally, 210.3 million accounts were breached in the first quarter of 2026. The United States accounted for 29 per cent of the reported breaches. Nigeria’s figures, therefore, form part of a wider global challenge involving the security of online accounts and personal information.
The development is particularly important because Nigerians now depend heavily on digital platforms.
People use online services for banking, communication, shopping, education, work and public services.
As more activities move online, compromised accounts can expose users to financial losses and other personal risks.
Surfshark’s analysis also showed that Nigeria has recorded about 24.1 million compromised user accounts since 2004. The country was ranked the third most affected in Sub-Saharan Africa.
In addition, about 7.5 million unique email addresses linked to Nigerian users have been exposed over the years. The report also identified approximately 13 million leaked passwords.
These figures show that the problem goes beyond isolated incidents. Instead, they point to a long-running challenge involving passwords, personal information and the security of online accounts.
According to the report, 54 per cent of breached Nigerian users remain exposed to risks such as account takeover, identity theft, extortion and other cyber-related crimes.
For everyday users, the consequences can be serious. A stolen password, for instance, can give criminals access to email accounts, social media profiles and other services. The risk becomes even greater when people use the same password across several platforms.
Furthermore, leaked personal information can help criminals create more convincing scams. When attackers obtain a person’s name, phone number, address or other details, they can use the information to make fraudulent messages appear legitimate.
The report also identified sensitive information connected to Nigerian users. This included financial details, contact information and residential addresses. About 1.9 million phone numbers and more than 925,000 addresses were reportedly exposed.
Meanwhile, Nigerian organisations are also dealing with frequent cyberattacks. A recent report by eSentire said organisations in the country faced an average of more than 4,700 attacks per week in the first half of 2026.
The report linked the changing threat environment to credential compromise, the abuse of trusted platforms and the growing use of artificial intelligence by attackers.
However, the rising threat does not mean people should stop using digital services. Rather, it highlights the need for better security habits among users and stronger protection from service providers.
For individuals, cybersecurity starts with simple steps. Users should create strong and unique passwords for important accounts. They should also activate multi-factor authentication whenever the option is available.
Similarly, people should avoid clicking on suspicious links or sharing passwords, one-time passwords and verification codes. Even when a message appears to come from a bank, telecommunications company or familiar contact, users should verify it before taking any action.
Organisations also have an important responsibility. Businesses and institutions that collect customer information need effective systems to protect that data. They should regularly update their security measures, monitor suspicious activity and educate both employees and customers about common cyber threats.
This is becoming even more important as businesses adopt artificial intelligence and other digital tools. These technologies can improve productivity and service delivery. However, they can also create new security risks when organisations fail to properly control access to sensitive information.
Nigeria’s technology sector, therefore, faces a dual responsibility. It must support digital innovation while also making online services safer and more trustworthy.
Government agencies also have a role to play. The National Information Technology Development Agency has previously called for stronger international cooperation to address cybersecurity threats. The agency has highlighted collaboration, information sharing and stronger digital security systems as important measures for building a more resilient digital environment.
Similarly, the Nigeria Data Protection Commission continues to promote responsible handling of personal data. Such efforts are important because people are more likely to trust digital services when they believe their personal information is being properly protected.
The latest breach figures also highlight the importance of digital literacy. Users need to understand how online scams work, how passwords can be compromised and why personal information should be handled carefully.
Schools, workplaces and community organisations can contribute to this effort by teaching practical online safety. Such education should be accessible to everyone, including young people, older users, small business owners and people who are only beginning to use digital services.
Cybersecurity is, therefore, more than a technical issue. It is also a shared responsibility. Government agencies, businesses, technology companies, financial institutions and individual users all have a role to play in protecting Nigeria’s growing digital environment.
As digital adoption expands, protecting accounts and personal information will become increasingly important. The 281,500 accounts reportedly breached in the first quarter of 2026 provide another reminder that digital growth must go hand in hand with stronger security.
People do not need advanced technical knowledge to improve their online safety. Simple habits, such as using unique passwords, enabling multi-factor authentication and verifying suspicious messages, can reduce exposure to cyber threats.
For Nigeria, the goal should be a digital environment where innovation and security grow together. As more people depend on online services, stronger protection of personal information will remain essential to maintaining trust and making the digital space safer for everyone.
