The Minister of Communications, Innovation, and Digital Economy, Dr Bosun Tijani, in a first response to the alleged sale of the National Identification Number (NIN) citizens details, has announced that he has discussed with the Minister of Interior, Olubunmi Tunji-Ojo and assured that his ministry and the National Identity Management Commission (NIMC) are “on top of the matter”.
In a tweet, the minister also added that the Nigeria Data Protection Commission (NDPC), a parastatal under his Ministry, has started a thorough investigation to ascertain the circumstances surrounding the breach.
“The @ndpcngr, a year-old agency under my supervision, has over the last few months created data compliance mechanisms for all MDAs and has since started a thorough investigation as to the circumstances surrounding this alleged breach”, he said.
Recall that NIMC, formerly under Tijani’s Ministry’s supervision, was moved to the Ministry of Interior in September last year.
In the same vein, the minister emphasised the need for a structured Digital Public Infrastructure (DPI) to strengthen technology applications in government. He also indicated a need for Data Exchange across MDAs to strengthen Nigeria’s cybersecurity oversight despite a historically siloed approach to procurement and development.
“For context, in October 2023, a few weeks after my appointment, I released a whitepaper (which you can find here – https://b.link/NigeriaDPI), elucidating my position on technology application within the public service and our proposed approach to leveraging existing investment in technology to accelerate economic prosperity through improved government processes”, the minister explained.
Lastly, the minister noted that he had submitted a request for a Presidential declaration to enable his team to align all government Ministries Departments and Agencies behind their goal to implement a data exchange system in Nigeria.
He expressed enthusiasm that by the end of the year, the initial pilot of the system should be in place and cover a minimum of 5 MDAs with oversight for supporting Nigerians through critical “life events”.
“I share this update to encourage Civil Society Organisations and those interested, to read the Whitepaper and engage with us as we strengthen our DPI”, he concluded.
Data breach and NIN data for N100: A back story
5 days ago, we reported that Paradigm Initiative revealed that the personal details of Nigerians are readily available on online platforms for just 100 naira, in what appears to be a major data breach involving the personal and sensitive data of millions of Nigerians.
The digital rights platform said it carried out further research into this latest data breach in which it discovered that AnyVerify.com.ng is a website involved in the commercial distribution of personal and private data of Nigerians.
“This alarming development presents a major breach of the fundamental rights to privacy, a breach of data privacy rights, and poses significant risks to individuals and the national economy,” the group revealed in a press statement seen by Technext.
This is coming just months after online media outlet, Fij.ng, published a story on its platform, alerting the public and the government that an unauthorized private website, www.XpressVerify.com.ng, has access to registered Nigerians’ data and is making money off it. Following the publication of that investigative story, the website was quickly taken down.
Now, it seems another platform has since taken its place, raising concerns that there may be many more.
Our reporter contacted the Executive Director of Paradigm Initiative, Gbenga Sesan who clarified that the organisation is not claiming that AnyVerify is unauthorised since only the National Identity Management Commission (NIMC) can confirm or deny such.
“However, AnyVerify’s practice of selling NIN slips of others for N100 is illegal and violates Nigeria’s Data Protection law. It is the responsibility of any verification company to put guards in place to avoid abuse, but AnyVerify refused to do that and NIMC has failed to sanction them,” he said.
In response, the National Identity Management Commission (NIMC) firmly denied allegations that the NIN and BVN data of Nigerian citizens has been compromised. In a press statement released Saturday, June 22, the Commission assured the public that no data breach has occurred and reiterated its commitment to safeguarding citizens’ information.
The Commission identified several websites, including idfinder.com.ng, Verify.Ng/signin, championtech.com.ng, trustyonline.com, and anyverify.com, as unauthorised data harvesters.
NIMC also urged the public to remain vigilant against false information and rely on verified sources for accurate updates. The Commission reiterated its commitment to providing secure and reliable identity management and maintaining the highest level of security for its systems and databases, which are critical national assets.
Technext Newsletter
Get the best of Africa’s daily tech to your inbox – first thing every morning.
Join the community now!
