The Bola Tinubu Government has launched an investigation into an alleged breach of the National Identity Number (NIN) database, according to a statement by the National Identity Management Commission (NIMC) on Sunday. The NIMC stated that it is investigating the alleged breach in collaboration with the Nigeria Data Protection Commission (NDPC).
Media reports raised concerns about illegal access to the NIN database by a private organization, XpressVerify.com, which reportedly had unrestricted access to every registered Nigerian’s NIN and personal details, monetizing the recovery of NINs and personal information.
NIMC clarified that while it offers NIN verification and other services through licensed partners, XpressVerify is not among them. The NIMC’s Chief Executive Officer, Abisoye Coker-Odusote, has ordered a comprehensive investigation into the allegation, emphasizing that there has been no recorded data breach yet.
The investigation aims to determine if any tokenization verification agent breached the licensing agreement directly or through sub-licensees. The NIMC assured that top-level security measures are in place to protect the NIN and other personal data of every citizen and legal resident.
In response, the NDPC announced that NIMC has agreed to cooperate in determining the root of the allegation. The NDPC pledged to review existing mediums for lawfully verifying the identity of enrollees on NIMC’s platform and stated that preliminary findings of the investigation would be made public within seven days.
The NDPC also asserted that it would work with relevant agencies to audit the trails of the alleged unauthorized data processing and monetization, ensuring that violators of the Nigeria Data Protection Act, 2023, are brought to justice.