Months after XpressVerify scandal, sensitive NIN and BVN data of Nigerians is still being sold online—FIJ investigation reveals fresh breach.
Months after Nigeria’s identity data breach scandal, a fresh investigation by FIJ has uncovered another rogue platform, NINPrint.com, selling citizens’ sensitive information online. The site, operated by Abbeytech Ventures, offers NIN and BVN verification for as little as N150 per search, despite no known link to the National Identity Management Commission (NIMC).
FIJ tested the site using phone numbers from consenting colleagues and successfully retrieved personal data on the fourth attempt. This comes after Nigeria spent over $600 million since 2011 to secure its national identity system.
“This raises serious privacy, security, and financial risks,” FIJ reported, citing laws that prohibit the sale of such data without consent.
The NIMC had earlier suspended third-party access following the XpressVerify scandal but restored access to “essential service providers.”
Under the NIMC Act and NDPA, unauthorized access to personal data carries penalties of up to ₦10 million and/or three years in prison.
NIMC has acknowledged the report and pledged to investigate.