The Ekiti State Universal Basic Education Board (SUBEB) has left sensitive personal data of applicants and staff exposed on its official website.
According to reports, the unprotected directory contained scanned identity cards, passport photographs, admission credentials, curricula vitae, and other documents linked to staff and job applicants.
A compressed folder with over 10,000 passport photographs and a PDF listing 2,902 police applicants, including their gender, local government of origin, and application IDs, were also found in the open index. Individual records such as identity cards, admission letters, and NYSC certificates were visible alongside XML files, JSON files, and raw website code.
The exposure contravenes the Nigeria Data Protection Act (NDPA) and National Information Technology Development Agency (NITDA) guidelines, which require government agencies to protect personal data through encryption and access restrictions. This comes weeks after a similar data exposure was reported on the Oyo State Teaching Service Commission (TESCOM) website.
Leave feedback about this