NIMC Denies Viral NIN Data Breach, Says National Identity Database Secure

The National Identity Management Commission (NIMC) has dismissed viral claims alleging that Nigeria’s National Identification Number database was breached, describing the reports as false and unfounded.

The commission said the claims were recycled from a 2024 report that had already been debunked.

A video circulating on social media had alleged that NIN and Bank Verification Number details could be purchased for as little as N100, and that some NIMC officials in Lagos were selling individuals’ NIN information for N1,000 outside the commission’s office.

In a statement issued via X on Thursday, NIMC said its National Identity Database has not been breached or compromised at any point.

“The Commission wishes to state, categorically, that this claim is false and unfounded. The Commission National Identity Database has not been breached or compromised at any point,” the commission stated.

NIMC said it maintains robust, multi-layered security infrastructure to protect the personal data of registered citizens and legal residents in line with international best practices.

The commission expressed concern over the circulation of unverified claims, warning that such reports could mislead the public and cause unnecessary panic.

“NIMC urges the public to disregard the video’s content and obtain information about the National Identity Management System only from NIMC’s official channels,” the statement added.

The commission also highlighted its recently launched NIN Authentication platform, known as NINAuth, a web, API and mobile verification service designed to strengthen data security and privacy.

According to NIMC, NINAuth requires the explicit consent of NIN holders before their data is shared for Know Your Customer processes or other verification purposes.

“With NINAuth, individuals can securely verify their identity for services such as SIM registration, immigration and passport processing, tax filings, and financial transactions without unnecessarily exposing their raw NIN or personal data,” the commission said.

NIMC said the initiative reflects its compliance with the NIMC Act 2026 and the Nigeria Data Protection Act 2023, which provide for the fair, lawful and transparent handling of citizens’ personal data.

The Director-General of the commission, Abisoye Coker-Odusote, has ordered a comprehensive investigation into the matter to determine whether any tokenisation verification agents breached their licensing agreements directly or through sub-licensees.

“NIMC will continue to work with relevant stakeholders to ensure that the identity information entrusted to the commission is properly protected,” Coker-Odusote assured.

The commission said it would continue working with security agencies and other relevant institutions to strengthen its systems and combat misinformation.

It advised Nigerians with concerns about their NIN or personal data to contact the commission through its official channels.