The National Identity Management Commission, NIMC, has rejected reports claiming that Nigeria’s National Identification Number, NIN, database was breached.
The commission called the claims “false and unfounded,” stating that the National Identity Database, NIDB, had not been breached or compromised.
A video making the rounds on social media had alleged that NIN and Bank Verification Number (BVN) details could be bought for as little as N100.
The video further claimed that some NIMC officials in Lagos were selling individuals’ NIN information for N1,000 outside the commission’s office.
In a statement shared via X on Thursday, NIMC said the claims were recycled from a 2024 report that it had already debunked.
“The Commission wishes to state, categorically, that this claim is false and unfounded. The Commission National Identity Database (NIDB) has not been breached or compromised at any point,” NIMC said.
The commission stated that it upheld “robust, multi-layered security infrastructure” to safeguard the personal data of registered citizens and legal residents, in keeping with international best practices.
NIMC voiced concern about the spread of what it termed unverified claims, noting that such claims could mislead the public and trigger needless panic.
It called on Nigerians to ignore the video and to seek information about the National Identity Management System solely through its official channels.
The commission also drew attention to its recently introduced NIN Authentication, NINAuth, a web application programming interface, API, and mobile verification service built to enhance data security and privacy.
As NIMC explained, NINAuth demands the explicit consent of NIN holders before their data can be shared for Know Your Customer (KYC) processes or other verification purposes.
“With NINAuth, individuals can securely verify their identity for services such as SIM registration, immigration and passport processing, tax filings, and financial transactions—without unnecessarily exposing their raw NIN or personal data,” the commission said.
NIMC stated that the initiative formed part of its adherence to the NIMC Act, 2026, and the Nigeria Data Protection Act, NDPA, 2023, both of which require that citizens’ personal data be handled fairly, lawfully, and transparently.
The commission added that it would keep collaborating with security agencies and other relevant institutions in order to reinforce its systems and tackle misinformation.
It encouraged Nigerians who have concerns regarding their NIN or personal data to reach the commission via its official channels.
