A cybersecurity expert, Emmanuella Aston, says poor understanding of personal data protection among Nigerians is increasing exposure to cyber exploitation and online attacks.

Ms Aston, a cybersecurity specialist at Techsocietal, said this in an interview on Nigeria’s cybersecurity challenges.

She said many internet users still share sensitive personal information carelessly, unaware of how cybercriminals combine such details to launch attacks.

According to her, attackers often gather names, phone numbers, social media activities and other publicly available information to profile and target victims.

“They pick bits and pieces of your info here and there, such as your name and phone number, go through your social media pages, gather more information and know how to attack,” she said.

Ms Aston noted that many Nigerians still viewed personal information such as certificates, phone numbers, and email addresses as insignificant despite their security implications.

She cited cases where leaked personal records and certificates were displayed publicly online and used for unauthorised activities.

“There is a lot of information in just one picture. It shows when you graduated, what you studied and the industry you belong to,” she said.

The expert also criticised businesses for collecting excessive customer information without clear reasons or adequate safeguards protecting such data.

According to her, some businesses routinely request customers’ email addresses and other details even when the information is unnecessary for transactions.

She said many organisations collected personal data simply because they had seen others do the same, without understanding the risks involved.

Ms Aston expressed concern over the level of awareness among small businesses operating mainly on social media platforms without structured compliance systems.

She wondered whether many online businesses fully understood their obligations under Nigeria’s data protection regulations.

According to her, weak public awareness also contributes to the problem, as many people willingly share personal details in exchange for small benefits.

“We have organisations asking people to input their details and promising to pay them, and people do it because they do not realise the value of their information,” she said.

Ms Aston stressed the need for stronger grassroots awareness campaigns to educate citizens and small businesses on responsible data handling and online safety.

She also called for improved enforcement of existing data protection laws and greater public awareness about reporting breaches and protecting digital rights.

The expert urged organisations to view customer data protection as part of their service responsibility rather than merely a legal obligation.

(NAN)