NIMC denies NIN database breach claims

ABUJA — The National Identity Management Commission, NIMC, has dismissed reports alleging that Nigeria’s National Identification Number, NIN, database was breached.

The commission described the claims as “false and unfounded,” saying the National Identity Database, NIDB, had not been breached or compromised.

A video circulating on social media had claimed that NIN and Bank Verification Number, BVN, details could be purchased for as little as N100.

The video also alleged that some NIMC officials in Lagos were selling individuals’ NIN information for N1,000 outside the commission’s office.

In a statement issued via X on Thursday, NIMC said the claims were recycled from a 2024 report which it had previously debunked.

“The Commission wishes to state, categorically, that this claim is false and unfounded. The Commission National Identity Database (NIDB) has not been breached or compromised at any point,” NIMC said.

The commission said it maintained “robust, multi-layered security infrastructure” to protect the personal data of registered citizens and legal residents in line with international best practices.

NIMC expressed concern over the circulation of what it described as unverified claims, saying they could mislead the public and cause unnecessary panic.

It urged Nigerians to disregard the video and obtain information concerning the National Identity Management System only through its official channels.

The commission also highlighted its recently launched NIN Authentication, NINAuth, a web, application programming interface, API, and mobile verification service designed to strengthen data security and privacy.

According to NIMC, NINAuth requires the explicit consent of NIN holders before their data can be shared for Know Your Customer, KYC, processes or other verification purposes.

“With NINAuth, individuals can securely verify their identity for services such as SIM registration, immigration and passport processing, tax filings, and financial transactions—without unnecessarily exposing their raw NIN or personal data,” the commission said.

NIMC said the initiative was part of its compliance with the NIMC Act, 2026, and the Nigeria Data Protection Act, NDPA, 2023, which provide for the fair, lawful and transparent handling of citizens’ personal data.

The commission said it would continue to work with security agencies and other relevant institutions to strengthen its systems and combat misinformation.

It advised Nigerians with concerns about their NIN or personal data to contact the commission through its official channels.