Data centre tasked on update, police probe into alleged breach by NIPSS
The Citizens Initiative for Safety Awareness (CISA) has called on the Nigeria Data Protection Commission (NDPC) to provide an update and take urgent action on a petition alleging a cybersecurity breach and unlawful access to private communications involving officials of the National Institute for Policy and Strategic Studies (NIPSS). In a letter dated April 10, […]
yushau
The Citizens Initiative for Safety Awareness (CISA) has called on the Nigeria Data Protection Commission (NDPC) to provide an update and take urgent action on a petition alleging a cybersecurity breach and unlawful access to private communications involving officials of the National Institute for Policy and Strategic Studies (NIPSS).
In a letter dated April 10, 2026, CISA’s National Coordinator, Mr. Chidi Omeje, expressed concern that nearly ten months after the petition was submitted, the commission had not issued any response.
The petition, filed on July 1, 2025, by Mr. Yushau A. Shuaib, alleged unauthorised access, interception, and use of private digital correspondence belonging to him and his organisation, PRNigeria.
According to CISA, the complaint specifically named Barrister Nima Salman Mann, Rear Admiral Abubakar Abdullahi Mustapha, and Professor Elias Wahab as individuals allegedly involved in the breach.
The group said the allegations raise serious concerns under the Nigeria Data Protection Act (NDPA) 2023, particularly regarding data privacy, cybersecurity safeguards, and the protection of sensitive information.
CISA warned that, if confirmed, the alleged actions would amount to a major violation of Nigeria’s data protection framework, with implications for institutional data governance, the safety of confidential media sources, and public trust in government institutions.
The organisation described the NDPC’s silence as troubling and urged the commission to clarify the status of the investigation, disclose any interim findings, and outline measures to prevent similar breaches in public institutions.
The group noted that the matter has evolved beyond an individual complaint, describing it as a test of Nigeria’s commitment to enforcing its data protection laws, especially within government agencies.
CISA has also appealed to the Inspector General of Police, Tunji Disu, to order an immediate investigation into the alleged cybercrime. In a separate statement issued on April 6, 2026, Omeje criticised what he described as prolonged delays by the Force Criminal Investigation Department (FCID) in acting on a related petition submitted since June 2025.
The organisation said that despite what it termed “credible evidence,” the police had yet to invite or question the individuals named in the petition. It further raised concerns about a possible conflict of interest, alleging that two of the suspects—Barrister Mann and Rear Admiral Mustapha—share membership of the National Institute (mni) with former senior police official DIG Sadiq Idris Abubakar, who previously oversaw the FCID. CISA suggested that this “mni protective shield” may have contributed to the delay, warning that such a situation undermines equality before the law.
The group also clarified that the cybercrime allegations are distinct from an ongoing civil suit at the Federal High Court concerning Mr. Shuaib’s withdrawal from the NIPSS programme, stressing that civil proceedings do not bar criminal investigation. “An elementary legal principle holds that a civil suit cannot be a bar to criminal investigation or prosecution,” it stated.
CISA urged the police to invite all individuals named in the petition for questioning in line with due process and called on authorities to uphold the rule of law and restore public confidence. It warned that failure to act decisively could erode trust in law enforcement and reinforce perceptions of a two tier justice system.
According to the statement signed by Omeje, the organisation remains committed to supporting efforts to strengthen institutional accountability and Nigeria’s digital security framework.