The Nigeria Data Protection Commission (NDPC) has revealed that a probe into the technical error in the 2025 Unified Tertiary Matriculation Examination (UTME) is underway.
NDPC head of media unit, Itunu Dosekun, said the investigation is to determine the extent to which the personal data of candidates may have been exposed and whether JAMB or its partners violated data protection laws.
Speaking in a statement on Tuesday, he added that the breach raises concerns about the adequacy of technical and organisational safeguards at some examination centres.
“The commission has initiated a full-scale investigation into the alleged breach at the Joint Admissions Matriculation Board (JAMB),” the commission said.
While noting that arrests have been made, with 20 suspects in custody in custody, the breach appears to be part of a broader pattern involving cyberattacks on public digital infrastructure.
“Over 100 notorious hackers are linked to targeting national examination bodies such as JAMB,” it stated.
Speaking further, NDPC disclosed that the investigation would include a “systemic audit” of JAMB’s data processing activities.
It also noted that particular attention will be paid to how third-party service providers manage sensitive personal data.