Faisal Usman Fagge
Data Unveiled · UNILAG Breach Probe
NDPC investigation · 2026
NDPC probes UNILAG, Lotus Bank & Hackerbella over alleged student data violations.
Potential breach of thousands of student records — including personal, academic and financial data.
~15,000
students potentially affected
data at risk3
entities under probe
UNILAG · Lotus Bank · Hackerbella5+
data categories exposed
PII, academic, financialNDPC
lead investigator
enforcementExposed data categories (estimate)
PII (names, ID)
Academic records
Financial data
Contact details
Entity risk exposure
UNILAG
Lotus Bank
Hackerbella
~15,000
student records exposed
Academic & financial
sensitive data types
NDPC investigation
potential NDPR violations
Lotus Bank · Hackerbella
third-party data processors
NDPC enforcement action — The Nigeria Data Protection Commission has launched a formal investigation into the University of Lagos (UNILAG), Lotus Bank, and Hackerbella over alleged violations of student data protection rights. The probe centres on unauthorised access and potential misuse of sensitive student data.
Preliminary findings suggest that personally identifiable information (PII), academic transcripts, financial records, and contact details may have been improperly accessed or shared. The breach reportedly affects current and former students, with some data allegedly used for unauthorised profiling.
Legal implications: Under the Nigeria Data Protection Regulation (NDPR), organisations can face significant fines and sanctions for data breaches. The NDPC is assessing the scope of the violation and potential penalties.
Key questions
- How was the data accessed?
- Was consent obtained?
- What security measures failed?
- Who is accountable?
Investigation ongoing · public hearing expected
