Commission orders probe into claims of exposed identity records and possible breach by verification agents…
The National Identity Management Commission, NIMC, has launched an investigation into claims that Nigerians’ National Identification Numbers and other personal information were exposed and offered for sale online.
The commission, however, says there is no evidence at this stage that its core systems have been compromised, urging Nigerians not to panic over unverified claims circulating on social media.
The development followed the circulation of a video alleging that sensitive identity information belonging to Nigerian citizens had been exposed and was available for sale.
In a statement issued in Abuja on Wednesday, NIMC’s Head of Corporate Communications, Kayode Adegoke, said the commission’s systems remained protected and that measures were in place to safeguard information stored in the National Identity Database.
Adegoke described the reports as misleading and urged members of the public to rely on information from official sources when dealing with concerns about the security of their NIN data.
He said NIMC remained committed to strengthening its systems against unauthorised access and protecting citizens’ personal information.
The commission’s Director-General, Abisoye Coker-Odusote, has meanwhile directed a comprehensive investigation into the allegations.
According to NIMC, the probe will establish whether any of its tokenisation verification agents violated the terms of their licensing agreements.
Investigators will also examine whether any breach occurred directly through licensed agents or through sub-licensees operating under them.
Coker-Odusote reaffirmed the commission’s responsibility to protect the identity information entrusted to it, while stressing its commitment to data protection and privacy.
The latest controversy comes against the backdrop of previous concerns over access to Nigeria’s identity database.
In March 2024, the Nigeria Data Protection Commission investigated allegations of unauthorised access to NIN information after reports emerged that a private website, XpressVerify.com, could retrieve personal details belonging to Nigerians.
Following the controversy, NIMC restricted access to its NIN database for licensed agents while investigations were ongoing.
By June 2024, the commission announced that its licensed Front End Partners and verification agents would be subjected to mandatory security vetting as part of efforts to tighten controls around the database.
The latest allegations come at a time when NIMC’s responsibilities within Nigeria’s digital identity system are expanding.
In June 2026, President Bola Tinubu signed the NIMC Act 2026 into law, replacing the commission’s 2007 legislation and expanding its responsibilities in the country’s digital identity architecture.
The new law retains the NIN as Nigeria’s foundational identity credential and provides for stronger safeguards around personal data.
NIMC said it would continue working with relevant stakeholders to strengthen security around the identity database and advised Nigerians to use only approved channels for NIN verification and other identity-related services.
For now, the commission says the investigation will determine whether the claims circulating online are linked to any breach involving licensed verification agents or their sub-licensees.
