Trouble as website gains access to Nigeria's NIN database, NDPC investigates

An investigation by the Foundation for Investigative Journalism indicates that there has been an unapproved access to the National Identification Number (NIN) database.

The Nigeria Data Protection Commission (NDPC) and the National Identity Management Commission (NIMC) is further looking into the issue in order to properly protect the data of Nigerians.

According to the commission, the investigation's preliminary results would be released to the public in seven days.

This website that gained unauthorized access to NIN's database is identified as XpressVerify.com

According to the report, every registered Nigerian's NIN and personal information was accessible to the private website without restriction, and the website made money off of the recovery of NINs and personal data.

The NIMC clarified in a statement on Sunday that it provides NIN verification and other services through authorised partners, but XpressVerify is not one of them.

It stated that the NIMC's chief executive officer and director general, Abisoye Coker-Odusote, has mandated a thorough inquiry to find out if any of the commission's tokenisation verification agents had violated the terms of their licenses, either directly or through any of its sublicensees.

The commission said: “Top-level security is in place to protect the NIN and other personal data of every citizen and legal resident.

“NDPC will work with relevant agencies to audit the trails of the alleged unauthorized data processing and monetization of same, and those who are found culpable for violating the Nigeria Data Protection Act, 2023 will be brought to justice."

BEB