Nigeria Cyber Watch
Reports since 1 Jan 2026. Not a live feed.
Threat level, Nigeria
Background readingHacktivismIncident response
No public level found
No published national cyber threat level found for Nigeria, checked 7 Nov 2026. Nigeria publishes no public cyber threat level; ngCERT issues advisories and the Nigeria Data Protection Commission oversees data protection.
Source: ngCERT
From official agencies
| Date | Agency | Advisory or alert |
|---|
Agency headlines, unedited.
Compare countries
| Country | Threat level | Confirmed | Claimed only | Via a vendor | Latest report |
|---|---|---|---|---|---|
 Malaysia | Medium | 19 | 35 | 7 | 7 Nov 2026 |
 Singapore | None published | 12 | 24 | 3 | 7 Nov 2026 |
 Indonesia | None published | 6 | 32 | 0 | 5 Nov 2026 |
 Thailand | None published | 9 | 33 | 0 | 3 Nov 2026 |
 Philippines | None published | 9 | 35 | 4 | 7 Nov 2026 |
 Vietnam | None published | 5 | 34 | 0 | 5 Nov 2026 |
 Israel | None published | 4 | 2 | 0 | 7 Nov 2026 |
 Iran | None published | 4 | 0 | 0 | 13 Jun 2026 |
 United Arab Emirates | None published | 4 | 4 | 1 | 7 Oct 2026 |
 Saudi Arabia | None published | 2 | 5 | 0 | 12 Oct 2026 |
 Egypt | None published | 1 | 4 | 1 | 29 Oct 2026 |
 South Africa | None published | 8 | 0 | 1 | 26 Oct 2026 |
| Nigeria | None published | 2 | 3 | 0 | 8 Aug 2026 |
 Kenya | None published | 1 | 6 | 0 | 25 Jul 2026 |
 India | None published | 9 | 2 | 1 | 28 Oct 2026 |
 Pakistan | None published | 3 | 3 | 0 | 22 Jul 2026 |
 Bangladesh | None published | 1 | 5 | 0 | 23 Oct 2026 |
 Sri Lanka | None published | 4 | 3 | 1 | 1 Jul 2026 |
 Cambodia | None published | 0 | 3 | 0 | 10 Jun 2026 |
 Myanmar | None published | 1 | 5 | 0 | 25 Oct 2026 |
 Brunei | None published | 0 | 0 | 0 | |
 Poland | BRAVO-CRP | 5 | 0 | 4 | 1 Oct 2026 |
 Ukraine | None published | 7 | 0 | 1 | 4 Nov 2026 |
 Russia | None published | 7 | 0 | 1 | 1 Nov 2026 |
 Czechia | None published | 3 | 0 | 1 | 22 Oct 2026 |
 Romania | None published | 2 | 0 | 0 | 14 Jul 2026 |
 Estonia | None published | 5 | 0 | 3 | 4 Nov 2026 |
 Turkey | None published | 3 | 0 | 1 | 16 Sep 2026 |
 United Kingdom | None published | 5 | 1 | 3 | 2 Nov 2026 |
 Germany | None published | 4 | 0 | 1 | 2 Nov 2026 |
 France | None published | 7 | 0 | 2 | 4 Nov 2026 |
 Netherlands | None published | 5 | 1 | 1 | 2 Nov 2026 |
 Italy | None published | 5 | 0 | 0 | 7 Nov 2026 |
 Spain | None published | 3 | 0 | 0 | 5 Feb 2026 |
 Ireland | None published | 3 | 4 | 0 | 2 Nov 2026 |
 Sweden | None published | 5 | 3 | 2 | 2 Nov 2026 |
 United States | None published | 6 | 0 | 2 | 28 Aug 2026 |
 Canada | None published | 5 | 0 | 1 | 21 Aug 2026 |
 Mexico | None published | 2 | 4 | 1 | 21 Aug 2026 |
 Brazil | None published | 2 | 2 | 0 | 2 Nov 2026 |
 Argentina | None published | 1 | 2 | 0 | 4 Aug 2026 |
 Chile | None published | 1 | 2 | 0 | 2 Nov 2026 |
 Colombia | None published | 1 | 2 | 0 | 4 Nov 2026 |
 Japan | None published | 9 | 0 | 5 | 4 Nov 2026 |
 South Korea | Caution | 6 | 0 | 2 | 29 Oct 2026 |
 China | None published | 0 | 3 | 0 | 7 Aug 2026 |
 Taiwan | None published | 9 | 0 | 2 | 3 Nov 2026 |
 Hong Kong | None published | 3 | 0 | 3 | 30 Oct 2026 |
 Australia | None published | 5 | 0 | 1 | 2 Nov 2026 |
 New Zealand | None published | 7 | 2 | 1 | 3 Sep 2026 |
2026 counts. Click a row to open a country.
Official numbers
| Measure | Value | Period | Source |
|---|---|---|---|
| Cyberattacks per week, as stated by the NDPC National Commissioner | 4,000+ | 2026 (stated May 2026) | Vanguard, quoting NDPC |
Who is targeting it
Laws and rules this year
Full stories
Official statements
- 16 Oct 2026The Nigeria Data Protection Commission set privacy benchmarks for public sector websites in the 2026 BPSR scorecard. Nigeria Data Protection Commission
Incidents
5 of 5 incidents
| What happened | Sources | |||||
|---|---|---|---|---|---|---|
 ⚠️ ClaimedDaily Trust | 8 Aug 2026 | Media | Ransomware | Claimed. Panzer listed the newspaper and threatened to publish data unless it made contact. | DeXpose · ransomware.live✓ 8 Nov | |
 ✅ ConfirmedZenith Bank | 4 Aug 2026 | Finance | Data leak | Confirmed. Zenith Bank told customers that hackers accessed a limited set of customer data, including email addresses and phone numbers, as part of a wider global attack. It said core systems were not affected. Claimed. Exfilsquad listed Zenith Bank on its leak site on 26 July. | Techeconomy · ransomware.live✓ 8 Nov | |
 ⚠️ ClaimedFidelity Pension Managers | 16 Jun 2026 | Finance | Ransomware | Claimed. DeadLock listed the pension fund administrator on its leak site. | Breachsense · ransomware.live✓ 8 Nov | |
 ✅ ConfirmedCorporate Affairs Commission (CAC) | 17 Apr 2026 | Government | Data leak | None | Confirmed. The CAC confirmed unauthorised access to limited aspects of its systems and is working with NITDA. The NDPC opened an investigation. Claimed. Online claims said about 25 million documents were taken. | Nairametrics · Leadership✓ 8 Nov |
 ⚠️ ClaimedSterling Bank | 27 Mar 2026 | Finance | Data leak | Response. The NDPC served notices on Sterling Bank and Remita on 1 April and opened a formal probe. Claimed. ByteToBreach claimed about 900,000 customer accounts and over 3,000 staff records, part of about 3TB taken with Remita data. | ITWeb Africa · WeeTracker✓ 8 Nov |
FAQ
Does Nigeria have a national cyber threat level?
No published national cyber threat level was found for Nigeria (checked 7 Nov 2026). Nigeria publishes no public cyber threat level; ngCERT issues advisories and the Nigeria Data Protection Commission oversees data protection.
Which organisations in Nigeria confirmed cyber incidents recently?
2 incidents confirmed since January 2026: Zenith Bank and Corporate Affairs Commission (CAC).
Which Nigeria organisations appear on ransomware or leak sites?
3 claims, not confirmed by the organisations: Daily Trust, Fidelity Pension Managers and Sterling Bank.
What counts as a confirmed incident?
The organisation, a regulator, the police or a minister has said something happened, as reported by a named outlet. Everything else is listed as claimed.
Why list leak-site claims at all?
Ransomware and extortion crews post victims on leak sites before anyone confirms. The list shows what attackers say. Treat it as a lead and check with the organisation.
Is the map a live attack feed?
No. It counts incidents and claims reported in 2026. Live attack maps from security vendors show scanning traffic hitting their sensors, which does not mean a place was attacked.
How often is it updated?
By hand when a national level changes or a notable incident is reported. The date is shown in the header.
Sources: official statements and regional press, including Bernama, The Star, Malay Mail, CNN Indonesia and Newsbytes.PH; leak-site claims from public ransomware trackers. Each entry links its source.