Cybersecurity Implications of Nigeria's Momo PSB Breach: Organizational Responses, Policy Adaptation and User Trust

The 2022 security breach at MoMo Payment Service Bank (PSB), a subsidiary of MTN Nigeria, is a critical case study of cybersecurity challenges in emerging digital financial ecosystems. The incident, which resulted in unauthorised transfers totalling approximately ₦22.3 billion ($53 million), occurred just days after the service's launch, highlighting systemic vulnerabilities in Nigeria's rapidly expanding fintech landscape. This research examines the organizational responses to the MoMo PSB breach, analyzes subsequent policy adaptations, and assesses the implications for user trust in digital financial services. The study employs a systematic literature review methodology, analyzing secondary data from academic publications, official statements, regulatory filings, and media reports between 2022 and 2025. Data were synthesized using thematic analysis to identify patterns in organizational crisis response, regulatory evolution, and trust-repair strategies. The analysis reveals a multilayered response strategy comprising technical containment, regulatory compliance, and trust-rebuilding measures. MTN Group's incident response included immediate service suspension, fraud reversal processes, and collaboration with law enforcement agencies. Regulatory investigations by the Nigeria Data Protection Commission (NDPC) identified deficiencies in data governance, prompting enhanced compliance requirements. The breach triggered a strategic reorientation at MoMo PSB, including investments in digital infrastructure and applications for additional licensing to strengthen security capabilities. These responses occurred against a backdrop of declining user adoption, with active wallets decreasing by 46% following the incident. The MoMo PSB case demonstrates the critical intersection of cybersecurity, regulatory oversight, and consumer trust in digital financial services. Effective organizational response requires not only technical remediation but also transparent communication and proactive policy engagement. The incident underscores the necessity of collaborative security frameworks involving financial institutions, telecommunications providers, regulators, and consumers to strengthen Nigeria's digital financial ecosystem against evolving threats.