Guarding your data against breaches
A survey by McAfee reveals that more than 40% of people worldwide are of the view that they lack control over their personal data. In 2008, there was widespread information regarding how top brands such as Facebook, Panera Bread and Sacramento Bee experienced data breaches that exposed several millions of personal records to abuse by […]
A survey by McAfee reveals that more than 40% of people worldwide are of the view that they lack control over their personal data. In 2008, there was widespread information regarding how top brands such as Facebook, Panera Bread and Sacramento Bee experienced data breaches that exposed several millions of personal records to abuse by criminals.
There appears to be a lucrative market for data, and hackers tend to sell data they steal to professional scammers who then scam their victims.
Data privacy breach is still a growing concern for Nigerians as more people fall victims to scammers and other criminals who mostly harvest their victims’ data through unsecured either careless or deliberate act of some data collector agencies and companies in the countries.
Just last week , for instance, a report claimed that the National Identity Number (NIN) database had been breached, but the National Identity Management Commission (NIMC) denied the breach. NIMC assured Nigerians that their data are safe and have not been compromised.
The Commission in a statement on Saturday also said it had not authorised any website or entity to sell or misuse the National Identification Number (NIN) of Nigerians as claimed by a report.
It also said idfinder.com.ng; Verify. Ng/sign in, championtech.com.ng, trustyonline.com, and anyverify.com are data harvesters not authorised by NIMC to access or manage sensitive data.
“NIMC urges the public to disregard any claims or services these websites offer and should not give their data as they are potentially fraudulent and data provided by the public on such websites are gathered and stored to build the data services they illegally provide.
Consequently, the public should know that the Commission has taken robust measures to safeguard the nation’s database from cyber threats- a secure, world-class, full-proof database is in place”, the statement signed by NIMC head of media, Kayode Adegoke, said.
However, some banks and other financial institutions have also been accused of breaching their customers’ data and the Federal Government said it is investigating about 40 of them.
The Nigeria Data Protection Commission (NDPC) said it is investigating 40 banks, insurance companies, stock brokers and other operators in the financial sector over customers’ data breach.
NDPC’s National Commissioner and CEO, Dr Vincent Olatunji said the commission would sanction the erring financial sector operators if found guilty. Nigeria Data Protection Regulation (NDPR) mandates FG to collect 2% of annual turnover of any organisation guilty of data breach.
“ We have beamed our search light on 40 players in the financial sector. We have written to them to explain why they have not been complying with data regulations and we may sanction them if they ‘re found guilty”, Dr Olatunji said.
While warning companies and government agencies collecting data of Nigerians in their course of operations against mishandling those data, Olatunji also assured Nigerians of adequate data protection.
Experts say proactive measures can significantly reduce your vulnerability. Here’s a roadmap to fortifying your data defenses:
Building Strong Passwords and Authentication:
Uniqueness is Key: Avoid using the same password across multiple accounts. Hackers often exploit reused passwords in a domino effect, compromising numerous accounts with a single breach.
Complexity is King: Craft strong passwords that combine uppercase and lowercase letters, numbers, and symbols. Password managers can generate and store complex passwords securely, eliminating the burden of memorisation.
Multi-Factor Authentication (MFA) is Your Ally: MFA adds an extra layer of security by requiring a second verification step beyond your password, often a code sent to your phone or generated by an app.
Encryption: Your Data’s Shield:
Encryption scrambles your data, making it unreadable to anyone without the decryption key. Utilize encryption software for sensitive files and consider full-disk encryption for your devices.
Updates: Patching the Gaps: Software vulnerabilities are entry points for attackers. Promptly install updates for your operating systems, applications, and firmware. These updates often include security patches that address newly discovered vulnerabilities.
Shrewd Practices for Everyday Security
Beware the Phishing Hook: Phishing emails and websites aim to trick you into revealing personal information or clicking malicious links. Be wary of emails with a sense of urgency, grammatical errors, or unexpected attachments. Never click on suspicious links and verify sender addresses before responding.
Public Wi-Fi: A Necessary Evil: Public Wi-Fi networks are convenient but lack the security of private connections. Avoid accessing sensitive information or financial accounts on public Wi-Fi. If essential, consider using a Virtual Private Network (VPN) that encrypts your internet traffic.
Knowledge is Power: Stay informed about the latest cyber threats and security best practices. Numerous reputable sources offer free online resources on cybersecurity awareness.
Spreading the Word: Security is a collective responsibility. Educate friends, family, and colleagues about online safety measures.