Nigeria's Minister of Communications, Innovation, and Digital Economy, Dr. Bosun Tijani, has issued a comprehensive response regarding the alleged sale of National Identification Number (NIN) citizens' details. In his initial statement, the Minister confirmed discussions with the Minister of Interior, Olubunmi Tunji-Ojo, ensuring that both his ministry and the National Identity Management Commission (NIMC) are actively addressing the situation. Furthermore, Dr. Tijani announced that the Nigeria Data Protection Commission (NDPC), an agency under his supervision and established just a year prior, has initiated a thorough investigation to uncover the full circumstances surrounding this alleged breach. He emphasized that the NDPC has spent recent months developing data compliance mechanisms for all Ministries, Departments, and Agencies (MDAs).

It is pertinent to note that NIMC, which was formerly under the supervision of Dr. Tijani’s Ministry, was transferred to the Ministry of Interior in September of the previous year. Beyond the immediate crisis, the Minister underscored the critical need for a structured Digital Public Infrastructure (DPI) to fortify technology applications within government operations. He highlighted the necessity for seamless Data Exchange across MDAs, a crucial step to bolster Nigeria’s cybersecurity oversight, especially considering a historical approach to procurement and development that has often been siloed.

Dr. Tijani elaborated on his long-term vision, stating that in October 2023, shortly after his appointment, he released a whitepaper outlining his position on technology application in public service and a proposed strategy to leverage existing technological investments for economic prosperity through improved government processes. To advance this agenda, the Minister revealed he has submitted a request for a Presidential declaration, aiming to align all government MDAs behind the goal of implementing a comprehensive data exchange system in Nigeria. He expressed optimism that an initial pilot of this system would be operational by the end of the year, encompassing a minimum of five MDAs crucial for supporting Nigerians through significant “life events.” He concluded by inviting Civil Society Organisations and other interested parties to review the Whitepaper and collaborate in strengthening Nigeria’s DPI.

The Minister's response follows serious allegations of data compromise. Five days prior, Paradigm Initiative reported that the personal details of Nigerians, including their NIN information, were readily available on various online platforms for as little as N100. This disturbing revelation points to a significant data breach involving millions of Nigerians' sensitive personal information. The digital rights platform conducted extensive research, identifying AnyVerify.com.ng as a key website engaged in the commercial distribution of private Nigerian data. Paradigm Initiative declared this development a major breach of fundamental privacy rights and data privacy rights, posing substantial risks to both individuals and the national economy.

This is not an isolated incident. Just months earlier, the online media outlet Fij.ng exposed an unauthorized private website, www.XpressVerify.com.ng, for accessing and monetizing registered Nigerians' data. Following that investigative report, XpressVerify.com.ng was promptly taken down. However, the emergence of platforms like AnyVerify.com.ng suggests a recurring problem, raising concerns that numerous other such sites might exist. Gbenga Sesan, the Executive Director of Paradigm Initiative, clarified that while his organization does not claim AnyVerify is unauthorized—a determination NIMC alone can make—AnyVerify’s practice of selling NIN slips for N100 is unequivocally illegal and violates Nigeria’s Data Protection law. Sesan further asserted that it is the responsibility of any verification company to implement safeguards against abuse, which AnyVerify failed to do, and NIMC has, in turn, failed to sanction them.

In stark contrast to these allegations, the National Identity Management Commission (NIMC) issued a firm denial on Saturday, June 22, refuting claims that the NIN and Bank Verification Number (BVN) data of Nigerian citizens have been compromised. In its official press statement, NIMC reassured the public that no data breach has occurred and reiterated its unwavering commitment to safeguarding citizens’ information. The Commission identified a list of websites, including idfinder.com.ng, Verify.Ng/signin, championtech.com.ng, trustyonline.com, and anyverify.com, as “unauthorised data harvesters.” NIMC strongly urged the public to remain vigilant against false information and to rely solely on verified sources for accurate updates. The Commission reaffirmed its dedication to providing secure and reliable identity management services and maintaining the highest level of security for its systems and databases, which it considers critical national assets.