NIMC: Debunks NIN Data Breach Nigeria Claims, Assures Database Security

• The National Identity Management Commission (NIMC) has strongly denied recent social media reports alleging a breach of Nigeria's National Identification Number (NIN) database.
• NIMC confirmed its National Identity Database (NIDB) has not been compromised and maintains robust, multi-layered security infrastructure.
• The Commission introduced its new NIN Authentication (NINAuth) service, which requires explicit consent from NIN holders for data sharing during verification processes.
• NINAuth enables secure identity verification for services like SIM registration and financial transactions without exposing raw NIN data.
• NIMC's initiatives, including NINAuth, demonstrate its commitment to compliance with the Nigeria Data Protection Act 2023 and the NIMC Act 2026.

The National Identity Management Commission (NIMC) has officially refuted widespread social media allegations concerning a breach of Nigeria's National Identification Number (NIN) database.

The National Identity Management Commission (NIMC) has officially refuted widespread social media allegations concerning a breach of Nigeria's National Identification Number (NIN) database. In a statement released on Thursday via its X handle, Kayode Adegoke, NIMC's Head of Corporate Communications, categorically dismissed the claims as "false and unfounded." The Commission clarified that a video circulating online, purporting to show evidence of a breach, is merely a recycled report from earlier in 2024 that had already been disclaimed.

NIMC firmly asserted that its National Identity Database (NIDB) has remained secure, stating it has "not been breached or compromised at any point." The agency underscored its commitment to safeguarding personal data for registered citizens and legal residents by maintaining a "robust, multi-layered security infrastructure" that adheres to international best practices. This robust framework is designed to protect sensitive information against unauthorized access and compromise.

Expressing significant concern, NIMC highlighted that the circulation of such unverified claims could mislead the public and generate unnecessary panic. The Commission strongly advised the public to disregard the content of the circulating video and to rely exclusively on NIMC's official communication channels for accurate information regarding the National Identity Management System. This proactive stance aims to counter misinformation and maintain public trust in the integrity of the national identity system.

In a move to further bolster data security and privacy, the National Identity Management Commission recently introduced its NIN Authentication (NINAuth) service. This innovative suite encompasses web, API, and mobile verification tools designed to provide a more secure method for identity confirmation. A cornerstone of the NINAuth system is the requirement for explicit consent from the NIN holder before any personal data can be shared, whether for Know Your Customer (KYC) processes or other verification purposes.

The NINAuth service enables individuals to securely verify their identity for a wide array of essential services. These include critical processes such as SIM card registration, immigration and passport applications, tax filings, and various financial transactions. Crucially, this system allows for identity verification without the need to unnecessarily expose an individual's raw NIN or other sensitive personal data, thereby significantly reducing the risk of data misuse.

This initiative by NIMC is a direct response to the evolving regulatory landscape, demonstrating the Commission's commitment to compliance with key legislative frameworks. Specifically, the implementation of NINAuth aligns with the provisions of the NIMC Act 2026 and the Nigeria Data Protection Act 2023, both of which mandate the fair, lawful, and transparent handling of personal data. The service underscores NIMC's dedication to upholding the highest standards of data protection for all Nigerians and legal residents.

The National Identity Management Commission has reaffirmed its unwavering commitment to protecting the identity information of all Nigerians and legal residents. This commitment extends beyond technological safeguards to include active collaboration with relevant security agencies. NIMC plans to continue these partnerships to further strengthen its systems and enhance public engagement efforts aimed at combating misinformation.

By consistently working with security partners, NIMC seeks to ensure the ongoing integrity and resilience of the Nigerian national identity database security. The Commission's proactive communication, including its recent statement debunking NIN data breach Nigeria claims, is vital in fostering public confidence and ensuring that citizens receive accurate information directly from official sources. This strategic approach is crucial for maintaining the trust essential for a robust national identity system.

Lawyers and compliance officers should note NIMC's official debunking of the NIN data breach claims, which provides reassurance regarding the integrity of the national identity database. They should also be aware of the new NINAuth service, which offers a more secure and consent-based method for identity verification, impacting client advisory on data protection and KYC compliance under the Nigeria Data Protection Act 2023.

Source: Original reporting via Punch Newspapers.