By Emmanuel Elebeke

The Nigeria Data Protection Commission (NDPC) has launched an investigation into an alleged data breach involving the Joint Admissions and Matriculation Board (JAMB), amid rising concerns over the potential exposure of candidates’ personal information.

Sources close to the development confirmed that the NDPC initiated the probe following reports suggesting that the confidentiality and integrity of data belonging to hundreds of thousands of candidates may have been compromised, possibly due to unauthorized access by hackers.

The investigation follows JAMB’s recent announcement of a technical glitch that affected 379,997 candidates across 157 examination centres in Lagos and the South-East. The incident not only disrupted the examination process but also triggered widespread concerns about cybersecurity vulnerabilities within JAMB’s digital infrastructure.

In response, security agencies including the Department of State Services (DSS) and the Nigeria Police Force have reportedly arrested at least 20 suspects, believed to be linked to a broader network of cybercriminals targeting national examination bodies. Authorities estimate that over 100 hackers may be involved in coordinated attacks on such institutions.

Preliminary findings also indicate that several examination centres may have failed to implement adequate technical and organizational measures to safeguard candidate data—potentially breaching national data protection regulations.

According to a source within the Commission, the NDPC’s investigation will go beyond the breach itself. It will include a comprehensive audit of JAMB’s data processing practices and those of its third-party service providers, aiming to uncover systemic lapses and enforce compliance with the Nigeria Data Protection Act (NDPA).

While the NDPC has not yet issued an official statement, the Commission is expected to release its preliminary findings in the coming weeks.