By 
Paradigm Initiative has uncovered a website illegally selling the personal data of Nigerians online. In a publication titled “Major Data Breach: Sensitive Government Data of Nigerian Citizens Available Online for Just 100 Naira,” the organization described this incident as a significant violation of fundamental privacy rights.
According to Paradigm Initiative, AnyVerify.com.ng is distributing personal and private data of Nigerians under the pretense of providing verification services. The digital rights advocacy group emphasized that this breach poses severe risks to both individuals and the economy.
The exposed data includes sensitive information such as National Identity Number (NIN), Bank Verification Number (BVN), Driving Licence, International Passport, Tax Identification Number (TIN), Permanent Voter’s Card (PVC), and phone numbers. The report revealed that this data is sold for a mere N100 per request.
Due to the gravity of the situation, Paradigm Initiative, through its legal partners Vindich Legal, has served pre-action notices to several government agencies, including the National Identity Management Commission (NIMC), Nigeria Data Protection Commission (NDPC), Nigeria Immigration Service (NIS), Federal Inland Revenue Service (FIRS), Central Bank of Nigeria (CBN), Independent National Electoral Commission (INEC), Federal Road Safety Corps (FRSC), and the Office of the Attorney General of the Federation (AGF).
This incident is not isolated. Earlier this year, the Foundation for Investigative Journalism published an exposé on XpressVerify, another website implicated in the illicit sale of Nigerians’ data. For as little as N200, users could access personal details such as phone numbers, NIN, addresses, and even photographs.
Breach of Data Laws
The 1999 Constitution of Nigeria recognizes privacy as a fundamental human right, guaranteeing the protection of citizens’ personal information. This led to the enactment of the Nigerian Data Protection Act 2023 and the establishment of the Nigeria Data Protection Commission, which is responsible for regulating data protection measures.
The National Identity Management Commission Act 2007 also makes it illegal for the commission to disclose information from the national database without proper authorization, except for national security reasons. The act specifies that no individual or corporate body shall access this data without the individual’s consent or commission authorization.
Cybersecurity expert Adedeji Adedoyin explained, “When these regulations are flouted, citizens’ privacy, economic stability, personal safety, and financial security are compromised.” He stressed the importance of robust measures to prevent the exposure and sale of private data, highlighting the trust people place in online services to protect their personal information.
Paradigm Initiative is a social enterprise dedicated to building ICT-enabled support systems and advocating for digital rights to improve the livelihoods of underserved youths.
Comments