NIMC speaks on ‘NIN database breach’

The National Identity Management Commission (NIMC) has reacted to reports alleging that Nigeria’s National Identification Number (NIN) database was breached and that citizens’ personal information was being sold.

The commission described the reports as “false and unfounded”, insisting that the National Identity Database, NIDB, has not been breached or compromised.

The clarification followed the circulation of a video on social media alleging that NIN and Bank Verification Number (BVN) details could be purchased for as little as N100.

The video further claimed that some NIMC officials in Lagos were allegedly selling individuals’ NIN information for N1,000 outside the commission’s office.

NIMC dismisses viral claims

In a statement issued through its official X account on Thursday, NIMC said the allegations were not new, describing them as recycled claims from a 2024 report which the commission had previously debunked.

“The Commission wishes to state, categorically, that this claim is false and unfounded. The Commission National Identity Database (NIDB) has not been breached or compromised at any point,” the commission said.

NIMC said it maintains a “robust, multi-layered security infrastructure” designed to safeguard the personal data of registered citizens and legal residents.

According to the commission, its data protection measures are operated in accordance with international best practices, stressing that the security of information contained in the national identity database remains a priority.

The commission also expressed concern about the circulation of unverified information concerning the NIN database, warning that such claims could mislead Nigerians and create unnecessary panic.

It therefore urged members of the public not to rely on the viral video or similar reports without verification from official sources.

NINAuth introduced to strengthen verification

NIMC also highlighted its recently launched NIN Authentication, known as NINAuth, as part of measures aimed at strengthening the security and privacy of identity verification.

NINAuth is a web, application programming interface, API, and mobile verification service designed to allow individuals to authenticate their identities while giving them greater control over how their personal information is accessed.

The commission said the system requires the explicit consent of NIN holders before their information can be shared for Know Your Customer, KYC, processes or other verification purposes.

“With NINAuth, individuals can securely verify their identity for services such as SIM registration, immigration and passport processing, tax filings, and financial transactions—without unnecessarily exposing their raw NIN or personal data,” NIMC said.

The commission explained that the system is intended to reduce unnecessary exposure of sensitive personal information during identity verification.

It said the initiative also forms part of its efforts to strengthen compliance with Nigeria’s data protection framework.

NIMC urges Nigerians to rely on official information

NIMC said NINAuth and other measures were part of its compliance with the NIMC Act, 2026, and the Nigeria Data Protection Act, NDPA, 2023.

The laws provide frameworks for the fair, lawful and transparent handling of citizens’ personal data.

The commission said it would continue to work with security agencies and other relevant institutions to strengthen its systems and respond to threats involving identity data.

It also said it would continue efforts to combat misinformation capable of undermining public confidence in the national identity management system.

NIMC advised Nigerians who have concerns about the security of their NIN or personal information to contact the commission through its official communication channels.

The commission reiterated that information concerning the National Identity Management System should be obtained from verified NIMC platforms rather than unverified social media posts.