A new report has revealed that Nigeria has suffered over 23 million email account breaches between 2004 and 2025, highlighting the growing threat of cybercrime in Africa’s largest economy.

Rising Cybersecurity Threats in Nigeria

According to the report, Nigeria ranks among the countries most affected by data breaches and cyberattacks, with millions of personal and corporate email accounts exposed on the dark web. These breaches often result in identity theft, financial fraud, phishing scams, and unauthorized access to sensitive information.

Cybersecurity experts warn that the widespread use of weak passwords, lack of two-factor authentication, and poor awareness of online safety practices have made Nigerians more vulnerable to hackers.

Nigeria Among Global Hotspots for Email Hacks

The report shows that:

• 23 million Nigerian email accounts have been compromised in at least one data breach since 2004.
• Breaches often involve major global platforms such as social media networks, e-commerce websites, and email providers.
• A growing number of attacks are linked to business email compromise (BEC) schemes, one of the most lucrative cybercrimes globally.

Why Nigerians Are Targeted

Nigeria’s large internet population, rapid growth in digital banking, and expanding e-commerce market make it a prime target for cybercriminals. With millions of people relying on digital platforms for work, communication, and financial transactions, stolen credentials are in high demand.

Cybersecurity specialists also note that many Nigerians reuse passwords across multiple platforms, making it easier for hackers to exploit breached data.

Protecting Against Email Breaches

Experts recommend the following steps for individuals and businesses to stay safe:

• Use strong, unique passwords for each account.
• Enable two-factor authentication (2FA) wherever possible.
• Monitor email accounts regularly for suspicious activity.
• Avoid clicking on unknown links or attachments in unsolicited emails.
• Invest in cybersecurity training for employees to reduce human error in corporate environments.

Government and Industry Response

The Nigerian government and regulatory bodies such as the National Information Technology Development Agency (NITDA) and the Central Bank of Nigeria (CBN) have been working to improve cybersecurity awareness and enforce stricter data protection laws.

In addition, private sector players in fintech, telecoms, and banking have been urged to adopt advanced cybersecurity infrastructure to safeguard customer data.

Bottom Line

With 23 million email account breaches in Nigeria since 2004, the report serves as a wake-up call for individuals, businesses, and regulators to prioritize cybersecurity measures. As digital adoption continues to rise, so does the need for stronger protection against online threats.