By Chinwendu Obienyi
Nigeria’s attractiveness to foreign investors is facing renewed scrutiny after fresh data showed a sharp rise in cyber vulnerabilities, with more than 280,000 accounts breached in the first quarter of 2026 alone. The worrisome development places the country 34th globally in data exposure rankings.
The figures, drawn from cybersecurity firm Surfshark, highlight growing concerns over Nigeria’s digital resilience at a time when the government is aggressively courting foreign direct investment (FDI) into its fintech, telecommunications, and broader digital economy sectors.
Globally, the report recorded 210.3 million breached accounts between January and March 2026, a sharp increase from previous quarters, underscoring what analysts describe as an accelerating wave of cyber insecurity driven by expanding digital infrastructure and the rapid integration of artificial intelligence systems.
While Nigeria’s quarterly tally places it outside the top tier of most affected countries, its long-term exposure remains significant. Since 2004, an estimated 24.1 million Nigerian user accounts have been compromised, including millions of email addresses, passwords, and sensitive identifiers.
More concerning for the FG and investors is the nature of the exposed data. The report indicates that Nigerian-linked breaches include financial records, phone numbers, residential addresses, and identity-linked information, increasing the risk of fraud, identity theft, and account takeovers.
Analysts warn that such data, once leaked, can circulate indefinitely through “combo lists” used by cybercriminal networks.
The implications for Africa’s largest economy extend beyond individual security risks. Foreign investors typically assess cyber resilience as part of broader country risk models, particularly in sectors reliant on digital infrastructure such as banking, e-commerce, and cloud services.
Persistent exposure to large-scale breaches can elevate perceived operational risk and increase compliance and insurance costs for multinational firms.
Nigeria’s position as a regional fintech hub could also face headwinds if confidence in data protection frameworks weakens.
The country has made significant progress in expanding digital financial inclusion, with mobile payments and online banking growing rapidly in recent years. However, analysts note that cyber insecurity could slow adoption rates if consumers and businesses begin to question the safety of digital platforms.
Surfshark’s analysis attributes the global rise in breaches partly to the expansion of artificial intelligence systems, which require large-scale data collection and storage. As more companies integrate AI into operations, the number of potential attack surfaces increases, creating additional vulnerabilities across digital ecosystems.
Responding to the report, Chief Security Officer, Tomas Stamulis, warned that organisations are accumulating more sensitive data than ever before, while simultaneously increasing the complexity of systems that must be secured.
In Nigeria, the National Data Protection Commission (NDPC) has previously flagged rising cyber threats targeting financial systems and critical infrastructure, urging organisations to strengthen both technical safeguards and governance frameworks.
However, experts argue that enforcement remains uneven and that many institutions still operate below global cybersecurity standards.
As Nigeria pushes to attract more foreign capital into its digital economy, the latest figures underscore a growing tension between rapid technological expansion and the country’s ability to secure the data underpinning it. Without stronger safeguards, analysts warn that cyber risks could increasingly weigh on investor sentiment and long-term FDI inflows.
