Cybercrime drained Nigeria of more than $3 billion between 2019 and 2025, underscoring the mounting financial toll of digital attacks as the nation pushes to expand its digital economy. The National Information Technology Development Agency (NITDA) released these figures on Tuesday in Abuja during a two-day cybersecurity workshop for government ministries, departments and agencies.
Kashifu Inuwa, NITDA's director-general, cited data from the Deloitte Nigeria Cybersecurity Outlook 2026 when making the disclosure. Represented by Ayodele Bakare, his assistant director for cybersecurity, Inuwa warned that rapid digitisation of government services has left public institutions more exposed to advanced cyberattacks.
The United Nations Office on Drugs and Crime ranked Nigeria among Africa's top three targets for cybercrime, according to findings referenced at the workshop. Inuwa attributed this to the country's expanding digital footprint and increased dependence on online systems.
"The threat we face is no longer the work of the lone opportunist. We are contending with organised, financially motivated, and at times politically driven actors," he said.
Gone are the days when hackers worked alone, Inuwa stressed. Modern cyber threats involve coordinated operations with clear financial or political objectives, and they exploit the same digital tools governments now use to serve citizens.
Security gaps in one agency could open doors for attackers to infiltrate others, he warned, making isolated defences inadequate. "These actors do not respect boundaries between our agencies.
A weakness in one MDA becomes a doorway into another, and this is why defence cannot be fragmented," Inuwa told the gathering.
He called for a unified cybersecurity approach across all government institutions rather than disconnected efforts. "Our defence must be converged and done in a concerted manner because cybersecurity in government shall not and never be fragmented," he added.
NITDA plans to bolster support through its Computer Emergency Readiness and Response Team (CERRT), offering preventive measures and incident response backing to MDAs. Prevention remains the most effective strategy, Inuwa stressed.
Regular risk assessments, tighter security policies, staff training, capacity development, incident response plans and ongoing system upgrades form the backbone of solid cybersecurity defences. He highlighted that no technical control can substitute for personnel understanding their security duties.
"No firewall or technical control can replace the need for personnel to understand and discharge their cybersecurity responsibilities," Inuwa said.
Participants should treat the workshop as a serious engagement to exchange intelligence and examine recent breaches rather than routine training. Workshop attendees will also review NITDA's draft Regulatory Guidelines for Government Information Security Management ahead of wider consultation.
"Nigeria's digital future is not a threat to be feared but an opportunity to be secured," Inuwa concluded. Cybersecurity expert Hamza Lateef, who facilitated sessions, examined Nigeria's shifting threat environment, covering ransomware attacks and advanced persistent threat groups targeting public infrastructure.
