A cybersecurity expert, Ms Emmanuella Aston, has warned that poor understanding of personal data protection among Nigerians is increasing their exposure to cyber exploitation and online attacks.
Aston, a Cybersecurity Specialist at Techsocietal, made this known in an interview while discussing Nigeria’s cybersecurity challenges.
She said many internet users still share sensitive personal information carelessly without realising how cybercriminals piece such details together to launch attacks.
“Attackers often gather names, phone numbers, social media activities and other publicly available information to profile and target victims. They pick bits and pieces of your info — your name, phone number — go through your social media pages, gather more information and know how to attack,” she said.
Aston noted that many Nigerians still consider personal information such as certificates, phone numbers and email addresses as insignificant, despite their security implications.
She cited cases where leaked personal records and certificates were displayed publicly online and used for unauthorised activities.
“There is a lot of information in just one picture. It shows when you graduated, what you studied and the industry you belong to,” she said.
The expert also criticised businesses for collecting excessive customer information without clear reasons or adequate safeguards.
She observed that some businesses routinely request customers’ email addresses and other details even when unnecessary for transactions, often copying others without understanding the risks.
Aston expressed concern over the low level of awareness among small businesses operating mainly on social media platforms without proper compliance systems.
She questioned whether many online businesses fully understand their obligations under Nigeria’s data protection regulations.
Weak public awareness also contributes to the problem, she said, as many people willingly submit personal details in exchange for small benefits.
“We have organisations asking people to input their details and promising to pay them, and people do it because they do not realise the value of their information,” she said.
Aston stressed the need for stronger grassroots awareness campaigns to educate citizens and small businesses on responsible data handling and online safety.
She called for improved enforcement of existing data protection laws and greater public awareness on reporting breaches and protecting digital rights.
The expert urged organisations to treat customer data protection as part of their service responsibility rather than merely a legal obligation.
