A website called AnyVerify has caused controversy by selling the personal information of over 100 million Nigerians, including sensitive data such as National Identification Numbers (NIN), Bank Verification Numbers (BVN), and Tax Identification Numbers.
This was done despite the fact that the website did not receive licensing from Nigeria's identity management commission (NIMC).
AnyVerify charges a nominal fee of ₦190 (13 cents) to access sensitive data of Nigerian individuals.
The Nigeria Data Protection Commission (NDPC) conducted an investigation that verified the security of NIMC's database infrastructure.
However, the investigation also disclosed that a violation occurred as a result of a NIMC agent's misuse of access, which led to arrests. The unauthorized data transactions were denied by NIMC.
The Nigeria Data Protection Commission (NDPC) conducted an investigation that verified the security of NIMC's database infrastructure.
However, the investigation also disclosed that a violation occurred as a result of a NIMC agent's misuse of access, which led to arrests. The unauthorized data transactions were denied by NIMC.
The accessibility of high-profile individuals' NIN slips through AnyVerify has been verified by Gbenga Sesan, executive director of Paradigm Initiative.
In contrast to licensed entities that have been vetted by NIMC, AnyVerify does not implement rigorous vetting processes for user registration.
There are ongoing concerns regarding data protection and vulnerabilities, with indications of potential insider threats within NIMC.
Paradigm Initiative has reported that AnyVerify has attracted substantial traffic, with over 567,990 visits by April 2024, since its launch in November 2023.
The ongoing challenges in protecting the confidential information of Nigerian citizens are underscored by the breaches, which have occurred in the context of organizational changes at NIMC.
Subscribe to our newsletter
As of time of writing, NIMC and NDPC have yet to respond to inquiries regarding the data breach and AnyVerify's unauthorized activities.