Cybersecurity Incident Tracking
We monitor and track cybersecurity incidents affecting Nigerian organizations, providing situational awareness and lessons learned to help prevent future attacks.
144+
Incidents Tracked
Since 2015
Monitoring Active
Incident Statistics since 2015
Breakdown of 144 tracked incidents by type
Note: Some incidents may not have been captured due to non-reportage
Incident Timeline
Major incidents tracked each year since 2015
A sophisticated phishing campaign targeting Nigerian voters was discovered ahead of the 2023 general elections. The fake portal mimicked the official INEC website to harvest voter credentials and personal information.
A federal government agency was hit by the 0XXX ransomware variant. Attackers demanded $300 in cryptocurrency for the decryption key. The attack disrupted operations for several days.
Nigerian fintech company Flutterwave experienced a security breach resulting in unauthorized transfers totaling approximately ₦2.9 billion. The incident highlighted vulnerabilities in payment processing systems.
Babcock University Information Management System (UIMS) was defaced with inappropriate content. The attack exposed weaknesses in the institution web application security.
Insurance company Leadway Assurance was targeted by the ALPHV (BlackCat) ransomware group. The sophisticated attack encrypted critical business systems and customer data.
A security researcher posted details about vulnerabilities on LinkedIn without following responsible disclosure practices, sparking debate about ethical disclosure in the Nigerian security community.
The official website of Ogun State Government was defaced by threat actors. The incident highlighted ongoing security challenges in government digital infrastructure.
Telecommunications giant Globacom Nigeria was targeted by the ALPHV ransomware group. Attackers demanded $2.5 million for decryption and threatened to leak stolen data.
Hacktivist group Anonymous Sudan launched DDoS attacks against MTN Nigeria as part of their response to ECOWAS intervention discussions. The attack caused intermittent service disruptions.
Report an Incident
If your organization has experienced a cybersecurity incident, report it to us. We provide coordination support and can help connect you with appropriate resources.