The National Identity Management Commission (NIMC) has rejected claims that Nigeria’s National Identification Number (NIN) database was hacked, saying a video circulating on social media is an old report that had already been discredited.
NIMC said on Thursday that the National Identity Database (NIDB) had not been breached or compromised, urging Nigerians to disregard the latest claims and rely on the commission’s official communication channels for information about the national identity system.
The clarification followed the circulation of a video alleging that sensitive information held in Nigeria’s national identity database had been exposed.
According to NIMC’s Head of Corporate Communications, Kayode Adegoke, the video is not evidence of a new cyberattack. The commission said it was a recycled report from 2024 that had previously been addressed and dismissed.
NIMC: National identity database remains secure
NIMC said it operates a multi-layered security infrastructure designed to protect the personal information of Nigerians and legal residents registered in the national identity system.
The commission said its security arrangements are intended to safeguard identity information in accordance with international data-protection practices.
It also warned that the spread of unverified claims about the NIN database could create unnecessary public anxiety, particularly because NIN information is increasingly connected to essential services.
The commission asked members of the public to verify claims about the National Identity Management System through NIMC’s official channels rather than relying on videos and posts circulating on social media.
Why NIN security matters beyond the identity card
The sensitivity surrounding reports of a NIN breach reflects the expanding role of the national identification system in Nigeria.
NIN information is increasingly used in processes involving telecommunications, banking and other financial services, immigration, passports and government-related transactions.
A compromise of identity information could therefore have consequences extending well beyond the loss of a single identification number.
NIMC pointed to its recently introduced NIN Authentication, or NINAuth, as part of its efforts to reduce unnecessary exposure of citizens’ identity information while allowing organisations to verify individuals.
NIMC promotes consent-based NIN verification
According to the commission, NINAuth provides web, API and mobile-based identity verification services and requires the explicit consent of the NIN holder before information is shared for Know Your Customer (KYC) or other verification purposes.
The system is designed to allow individuals to authenticate their identity for services including SIM registration, immigration and passport processing, tax filings and financial transactions without routinely exposing their raw NIN or other personal information.
That distinction is significant as more Nigerian institutions depend on digital identity verification.
Rather than organisations repeatedly receiving or handling a person’s underlying identity information, NIMC says its authentication framework is intended to allow verification while limiting the unnecessary disclosure of personal data.
NIN system and Nigeria’s data protection rules
NIMC said its approach is aligned with the NIMC Act 2026 and the Nigeria Data Protection Act 2023, which establish requirements around the lawful, fair and transparent handling of personal information.
The commission said it would continue working with relevant security agencies to strengthen the national identity infrastructure and improve public communication around misinformation.
For Nigerians, however, the immediate message from NIMC is straightforward: the viral video should not be treated as evidence that the NIN database has been breached.
The commission maintains that the national identity database remains uncompromised and that claims suggesting otherwise are based on recycled material rather than a newly detected breach.
