NIN Database Breach Claims: NIMC Says Data Was Not Compromised

The National Identity Management Commission has denied claims circulating on social media that Nigeria’s National Identification Number database has been breached, describing the reports as false and unfounded.

NIMC said the video being circulated is a recycled report from 2024 that the commission had previously addressed and disclaimed.

In a statement issued by its Head of Corporate Communications, Kayode Adegoke, the commission said its National Identity Database has not been breached or compromised.

NIMC rejects breach claims

The controversy followed the circulation of a video on social media alleging that NIN and Bank Verification Number details could be obtained for money.

The video also made allegations involving the sale of personal information by individuals said to be associated with NIMC offices in Lagos.

NIMC did not substantiate those allegations. Instead, the commission said the material was based on an old report from 2024 and urged members of the public to disregard the claims.

The commission said it maintains what it described as a robust, multi-layered security infrastructure designed to protect the personal data of registered citizens and legal residents.

NIMC also warned that the circulation of unverified information could mislead the public and create unnecessary concern about the security of the national identity system.

Commission points to NINAuth

Alongside its denial, NIMC highlighted its recently introduced NIN Authentication platform, known as NINAuth.

The commission describes NINAuth as a suite of web, application programming interface and mobile verification services designed to improve identity verification while strengthening data security and privacy.

Under the system, NIMC says NIN holders must provide explicit consent before their information is shared for Know Your Customer processes or other verification purposes.

The commission said the system is intended to allow people to verify their identities for services including SIM registration, immigration and passport processing, tax filings and financial transactions without unnecessarily exposing their raw NIN or other personal information.

Data protection obligations

NIMC said NINAuth forms part of its efforts to comply with the NIMC Act 2026 and the Nigeria Data Protection Act 2023.

The commission said the laws require personal data to be handled fairly, lawfully and transparently.

The introduction of consent-based verification comes as Nigeria’s digital identity infrastructure is increasingly connected to financial services, telecommunications, government services and other areas requiring identity authentication.

That makes the protection of identity information an important part of maintaining confidence in digital services.

What NIMC says about the viral video

NIMC’s position is that the viral material does not demonstrate that its current National Identity Database has been compromised.

The commission specifically described the video as recycled material from 2024 and said the story had already been disclaimed.

The distinction is important because claims contained in a circulating video are not the same as independently verified evidence of a database breach.

As of September 24, NIMC’s publicly stated position is that there has been no breach or compromise of its National Identity Database.

NIMC urges public to use official channels

The commission advised members of the public to obtain information about the National Identity Management System through NIMC’s official communication channels rather than relying on unverified social media reports.

NIMC also said it would continue working with relevant security agencies and other institutions to strengthen its systems and public engagement.

The commission’s response comes at a time when identity information is increasingly used across Nigeria’s digital economy, making accurate information about the security of the national identity infrastructure particularly significant.

For now, the confirmed development is NIMC’s denial of the alleged breach. The commission has not announced a current compromise of the National Identity Database.