In response to allegations of potential exposure of sensitive citizen data, the National Identity Management Commission (NIMC) has reassured the public that the data of Nigerians remains secure and uncompromised.
On Saturday, the National Identity Management Commission (NIMC) issued a statement, signed by its head of corporate communications, Kayode Adegoke, providing assurance regarding recent concerns.
Earlier in the week, Paradigm Initiative, a pan-African social enterprise, had alerted the public about the sale of national identification numbers (NINs), bank verification numbers (BVNs), and other personal data of Nigerians on a website called ‘AnyVerify.com.ng’ for as little as N100 (Naira). The organization highlighted that numerous unauthorized websites claim to possess and offer access to sensitive personal and financial information of Nigerian citizens at a nominal fee.
“This concerning development represents a significant breach of fundamental privacy rights and data protection, posing substantial risks to individuals and the national economy,” the organization emphasized.
Responding to the report, NIMC clarified that it has not authorized any website or entity to sell or misuse the National Identification Number (NIN) or any other identities.
The Commission identified idfinder.com.ng, Verify.Ng/sign in, championtech.com.ng, trustyonline.com, and anyverify.com as data harvesters not authorized by NIMC to access or manage sensitive data.
NIMC urged the public to disregard any claims or services offered by these websites, emphasizing they may be fraudulent. It cautioned against providing personal data, as such information could be unlawfully gathered and utilized to support their illicit activities.
“Accordingly, the public should be aware that the Commission has implemented rigorous measures to protect the nation’s database from cyber threats. Our infrastructure is equipped with a secure, world-class database that adheres to the stringent ISO 27001:2013 Information Security Management System Standard. We undergo annual recertification and strictly comply with the Nigerian Data Protection Law.
“In addition, NIMC advises Nigerians to refrain from sharing their data with unauthorized or phishing websites, as this can lead to data harvesting and compromise personal information. The Commission reaffirms its commitment to maintaining ethical standards in data protection in accordance with federal government directives and data privacy regulations. Authorized partners or vendors are not permitted to scan or retain NIN slips but are authorized solely to verify NINs through approved channels.
“The Commission is actively collaborating with law enforcement agencies to apprehend individuals posing as online vendors, who will face legal consequences for their actions.
“NIMC urges the public to stay vigilant against misinformation and rely on verified sources for accurate updates. We remain dedicated to delivering secure and dependable identity management services, prioritizing the highest level of security for our systems and databases, which are crucial national assets.”