- Paradigm Initiative reported that the data of Nigerians are available on an online platform for a N100 fee
- Though the NIMC dismissed the allegations, netizens have chided the agency and others for violating their privacy rights
- The dust raised by the report has raised questions about the efficiency of the agencies in charge of data many data collection and storage agencies in Nigeria and the type of ID they issue
Nigerians woke up on Thursday, June 20, to the news by Paradigm Initiative that citizens’ data can be obtained on an online platform for as little as N100.
The organisation said that after an investigation, it found that AnyVerify.com.ng, a website that has been operational since November 2023, is commercialising Nigerians' personal data, including their National Identification Number (NIN), Bank Verification Number (BVN), phone numbers, and driver’s licences, for N100 per request to any interested party.
It added that the website had 567,990 visits in February 2024 and 188,360 visits in April 2024.
Paradigm Initiative, in a statement, said the development is a breach of the fundamental rights to privacy, data privacy rights and poses a huge risk to individual safety and the nation’s economy.
It added that the investigation followed a report published by FIJ on March 16, 2024, about the operations of a website, XpressVerify.com.ng, which had access to and was commercialising the data of citizens, although the website has now been taken down.
The organisation added that due to the implication of the action on citizens, Vindich Legal, through its legal partners, have served a pre-action notice to relevant government agencies.
They include the National Identity Management Commission (NIMC), the Nigeria Data Protection Commission (NDPC), the Nigeria Immigration Service (NIS), the Federal Inland Revenue Service (FIRS), the Central Bank of Nigeria (CBN), the Independent National Electoral Commission (INEC), the Federal Road Safety Corps (FRSC) and the Office of the Attorney General of the Federation.
NIMC’s rebuttal
In response to the report, however, the NIMC dismissed the allegations of breach of its database.
The commission, in a statement by Head, Corporate Communications, Kayode Adegoke, on Saturday, June 22, said it did not authorise any website or entity to sell or misuse the NIN and other sensitive information of the citizens.
The stamen noted that the NIMC had adopted proactive measures to safeguard the nation’s database from cyber threats and provide a secure, world-class, full-proof database, adding that its infrastructure meets the ISO 27001:2013 Information Security Management System Standards, with annual recertification and strict compliance with the Nigerian Data Protection Law.
Nigerians’ data not safe – Paradigm Initiative
To further buttress the result of its investigation, Paradigm Initiative, through its Executive Director, Gbenga Sesan, said his organisation bought the NIN slip of the Minister of Digital Technology and Innovation, Bosun Tijani, and those of other prominent Nigerians for N100 each from AnyVerify.
Sesan, in an interview with News Central TV on Monday, said NIMC’s statement on the issue connotes that Nigerians are the ones giving out their data to fake websites.
He also berated NDPC for not safeguarding NIMC’s database after the FIJ’s report in March was reported to it.
He said, “NIMC’s statement suggests that it is Nigerians who are giving their data to these fake websites, but this is NIMC’s data, and we now have proof. We got the NIN slip of the minister, Dr Bosun Tijani; we got the NIN slip of the number one data regulator in Nigeria, Dr Vincent Olatunji.
“We bought them for N100 each to demonstrate that this is not a joke. It basically means that your identity is for sale for N100. The real implication is that anything we can do with a NIN slip, we can get a SIM card with that. Who knows if anyone has the President’s SIM card right now. Or the National Security Adviser? A military general leading warfare in a place where they are dealing with terrorists?
“What if a terrorist bought the general’s NIN slip, got his SIM card and sent a message to the troops and said, ‘Meet me at 07:00 14 degrees north,’ just to ambush them? The implications are serious. It means that anybody can claim to be you. They can get your SIM card and do it.
“When NIMC says there is no breach, we understand that they are trying to control and not create panic. But at this point, they need to hit the panic button; otherwise, there will be impunity over and over again.”
Nigerians react to the porosity of their data
While the dust of Paradigm Initiative’s investigation and subsequent legal action against some government agencies is yet to settle, netizens have chided the agencies for the danger the veracity of the report portends.
Taking to X (formerly Twitter), @DeleEnamahoro said, “This deserves a class action from Nigerians. What utter madness is this? This is flagrant breach of data security & privacy of Nigerians. Enough of these aberrations.”
@khardiy1 wrote, “NIMC has a lot to explain. How do these people get access to these data? Who is selling it to them??”
YemiFirstson tweeted, “Naso our information take dey easy to access oh.” @teejayviruz said, “They keep collecting data at multiple points without an ecosystem to secure the data.” @AmaechiIgbonna2 wrote, “There are still many sites doing this now.”
Lending their voice to the report, @Ifeyinwanene said, “@bosuntijani Your NIN was purchased for N100. We’re waiting to hear from you.”
@addel_cares wrote “What is really wrong in Nigeria? @bosuntijani please can you address this?
“More harm than good”: NIMC’s 3-in-1 card announcement does not excite Nigerians
Meanwhile, TheRadar had reported that Nigerians are not enthusiastic about the 3-in-1 identification card recently proposed by the NIMC.
They expressed doubt over the commission's capacity to carry out such a technology-driven initiative owing to frustrations from previous exercises.
