Sterling Bank Hit by Major Data Breach, Exposing Nearly 1 Million Customers’ Sensitive Information A severe cybersecurity breach at Sterling Bank has left nearly one million customers vulnerable after a dark web hacking group, ByteToBreach, allegedly infiltrated the bank’s systems, compromising a vast trove of personal and financial data. The incident, one of Nigeria’s most significant financial data leaks, has sparked widespread panic among account holders and raised urgent questions about the bank’s security protocols. The breach, reportedly executed by exploiting a vulnerability in Oracle WebLogic Server, allowed attackers to extract 2.2GB of sensitive data, including Bank Verification Numbers (BVN), NUBAN account details, scanned IDs, transaction histories, and internal credit scores. Over 900,000 customer records and 3,000 employee files including those of top executives were exposed, heightening fears of financial fraud and targeted criminal activity. Customers have expressed alarm over the potential for "Social Engineering 2.0", a tactic where fraudsters use stolen data to manipulate victims into divulging OTPs and other credentials. The leak of home addresses and identity documents has also raised concerns about physical safety, particularly in a climate where kidnappers and scammers exploit precise personal information. The Nigeria Data Protection Commission (NDPC) has launched a formal investigation, issuing a Notice of Investigation on April 1, 2026, and expanding its probe to include Remita Payment Services Ltd. due to the interconnected nature of Nigeria’s digital payment ecosystem. Dr. Vincent Olatunji, NDPC’s National Commissioner, has warned of severe penalties under the Nigeria Data Protection Act (2023) for any entity found negligent in safeguarding data. Critics argue that Sterling Bank’s leadership, under CEO Abubakar Suleiman, may have prioritized corporate initiatives over critical cybersecurity investments, leaving systems vulnerable. Financial analysts describe the breach as a consequence of favoring "optics over operational resilience," emphasizing that robust data protection is a non-negotiable requirement in modern banking. The fallout extends beyond regulatory scrutiny, with customers reportedly considering mass account closures amid eroded trust. The incident has also ignited a broader debate on Nigeria’s financial sector cybersecurity preparedness, underscoring the need for stronger defenses as digital banking adoption grows. If confirmed, the breach would mark a monumental failure in oversight, risking long-term reputational damage and a potential collapse of public confidence in Sterling Bank. The outcome of the NDPC’s investigation and the bank’s response will likely shape its credibility for years to come.

University of Phoenix Data Breach Exposes 3.5 Million in Clop Ransomware Campaign The University of Phoenix disclosed a massive data breach affecting nearly 3.5 million individuals, including current and former students, staff, faculty, and suppliers. Attackers exploited a zero-day vulnerability (CVE-2025-61882) in the university’s Oracle E-Business Suite (EBS) financial application, gaining unauthorized access between August 13 and 22, 2025. The intrusion went undetected until November 21, one day after the Clop ransomware gang listed the university on its data leak site. The breach compromised sensitive data, including: - Names and contact information - Dates of birth - Social Security numbers - Bank account and routing numbers (though the university noted these were accessed "without means of access") The attack is part of a broader campaign targeting over 100 organizations across multiple sectors. Security researchers attribute the operation to Clop, though some hesitate to confirm sole involvement by the FIN11 threat group. Other affected U.S. universities include Harvard, the University of Pennsylvania, and Dartmouth College. Despite the scale—ranked as the fourth-largest ransomware attack globally in 2025—no University of Phoenix data has been publicly leaked as of this report. The university is offering free identity protection services, including credit monitoring, dark web monitoring, and fraud reimbursement, to impacted individuals. The incident highlights systemic vulnerabilities in higher education, with threat actors increasingly exploiting zero-day flaws in centralized platforms to maximize data exfiltration. Education remains a prime target due to its vast repositories of personal and financial information.