NIMC Denies NIN Data Breach Claims, Orders Probe

In Short

• NIMC says Nigerians’ National Identification Numbers, or NINs, were not exposed.
• The agency is investigating whether licensed verification agents broke their agreements.
• Nigerians were advised to use approved channels for NIN verification.

What Happened

Nigeria’s National Identity Management Commission, NIMC, has denied claims that the NIN database was breached. The denial follows a video circulating on social media that alleged NINs and other personal data were exposed and offered for sale.

NIMC said its systems remain protected. It also said it has safeguards in place to protect identity information stored in the National Identity Database.

The Director-General, Abisoye Coker-Odusote, ordered a comprehensive investigation into the claims. NIMC said the probe will focus on its tokenisation verification agents.

Tokenisation is a security method that replaces sensitive data with a substitute value, like using a temporary code instead of your real ID number. NIMC wants to confirm whether any agent breached licensing terms, either directly or through sub-licensees.

The commission also urged Nigerians to ignore unverified information that could cause panic. It advised people and businesses to use only approved channels for NIN verification and other identity-related services.

Why It Matters

NIMC’s NIN has become a key requirement for many services, including SIM registration, banking checks, and government programmes. That means trust in the identity system affects onboarding, fraud prevention, and day-to-day digital transactions.

This is not the first time NIN data security has been questioned. In 2024, regulators investigated reports that a private website could retrieve personal information, and NIMC tightened access for licensed agents and introduced additional security vetting.

If the investigation finds that agents or sub-agents mishandled access, it could lead to stricter controls for identity verification vendors. That may slow some onboarding flows in the short term, but it can also reduce the risk of identity fraud over time.