NIMC debunks claims of NIN database breach, insists system remains secure
The National Identity Management Commission (NIMC)
Abdullateef Fowewe
The National Identity Management Commission (NIMC) has rejected circulating social media claims that Nigeria’s National Identification Number (NIN) database has been breached, describing a viral video as a recycled and previously disclaimed report from 2024.
In a press release dated 23 September 2026, the Commission stated that it had become aware of the video alleging a breach of the National Identification Number database.
“The Commission wishes to state, categorically, that this claim is false and unfounded,” the statement said.
It emphasised that the National Identity Database (NIDB) “has not been breached or compromised at any point.”
NIMC said it maintains a robust, multi-layered security infrastructure to protect the personal data of registered citizens and legal residents in line with international best practices.
The agency expressed concern over the spread of unverified claims, noting their potential to mislead the public and cause unnecessary panic.
It urged Nigerians to disregard the video and obtain information about the National Identity Management System only from official NIMC channels.
NIMC also highlighted its recently launched NIN Authentication (NINAuth) platform, described as a suite of web, API, and mobile verification services designed to enhance data security, protect privacy, and require explicit consent from NIN holders before data is shared for Know Your Customer or other verification processes.
The platform supports identity checks for services such as SIM registration, immigration and passport processing, tax filings, and financial transactions without exposing raw NIN details.
NIMC, established under the NIMC Act No. 23 of 2007, is responsible for creating, operating, and managing Nigeria’s National Identity Database and issuing NINs.
Similar allegations of data exposure or online sales of NIN and related personal information surfaced repeatedly in 2024.
At the time, NIMC consistently denied any breach of its core database, attributing many incidents to unauthorised data harvesters and third-party sites rather than a compromise of its systems.
Investigations and public statements followed those earlier reports, and the Commission has pointed to certifications such as ISO information security standards as part of its safeguards.
NINAuth itself was introduced earlier (with presidential endorsement for use across government agencies) as a measure to give individuals greater control over their data and strengthen verification processes.
The latest denial comes amid ongoing public sensitivity around digital identity security in Nigeria, where NIN is increasingly required for banking, telecommunications, and government services.
