The National Identity Management Commission, NIMC, has dismissed viral claims of a NIN data breach, assuring Nigerians that its National Identity Database has not been compromised.
The commission’s Head of Corporate Communications, Kayode Adegoke, described a video circulating on social media as false and unfounded, saying it was a recycled report from 2024 that had previously been disclaimed by NIMC.
“The Commission National Identity Database (NIDB) has not been breached or compromised at any point,” NIMC said.
The commission said it maintains a robust, multi-layered security infrastructure designed to protect the personal information of registered citizens and legal residents.
It urged Nigerians to disregard unverified reports capable of creating unnecessary panic and obtain information about the National Identity Management System through its official channels.
However, the commission has also ordered an investigation into the allegations.
According to NIMC, Director-General Abisoye Coker-Odusote directed a comprehensive investigation to establish whether any of the commission’s tokenisation verification agents breached their licensing agreements, either directly or through sub-licensees.
The distinction is significant. While NIMC is denying that its National Identity Database was breached, it is separately examining whether licensed verification channels or agents may have violated their contractual or access conditions.
The latest controversy comes against the background of previous concerns over access to Nigeria’s identity database.
In 2024, allegations involving a private website, XpressVerify.com, prompted investigations by NIMC and the Nigeria Data Protection Commission. NIMC subsequently restricted licensed agents’ access and announced additional security vetting for Front End Partners and verification agents.
NIMC has also pointed to NIN Authentication, known as NINAuth, as part of its efforts to strengthen identity verification and data protection.
The platform provides web, API and mobile services for NIN authentication and is designed around user-consented verification. According to NIMC, explicit consent is required before personal information is shared for Know Your Customer processes or other verification purposes.
The commission says NINAuth can support identity verification for services including SIM registration, immigration and passport applications, tax filings and financial transactions without unnecessarily exposing a person’s raw NIN or other personal information.
The development also comes after President Bola Tinubu signed the NIMC Act 2026 into law in June. The new law replaced the 2007 legislation and retained the NIN as Nigeria’s foundational identity credential, while strengthening NIMC’s role in digital identity, authentication and data protection.
NIMC urged Nigerians to use only approved channels for NIN verification and other identity-related services.
The commission said it would continue working with relevant stakeholders to protect identity information entrusted to it and strengthen safeguards against unauthorised access.
For now, NIMC maintains that the viral claim does not establish a breach of the National Identity Database, while the separate investigation is expected to determine whether any licensed verification agent or sub-licensee violated NIMC’s licensing conditions.
