Group demands government’s action on data breaches

Paradigm Initiative (PIN) has called on the Federal Government to strengthen the Nigeria Data Protection Commission (NDPC), implement Nigeria Data Protection Act (NDPA), conduct investigations to identify illegal online activities and enhance cyber-security measures to prevent further data breaches.
   
The call followed an investigation by PIN into the activities of some private websites operating in the country’s digital space to uncover how they access registered data of Nigerians and monetise them.
   
PIN presented proof of its investigation to journalists in Lagos, including National Identity Management System (NIMS) slips of the Minister of Communications, Innovation and Digital Economy, Dr Olatubosun Tijani, and the Head of Nigeria’s Data Protection Commission, Dr Vincent Olatunji, as well as other data such as home addresses, tracking identification and National Identification Number (NIN), which were purchased for N100 each from a site, AnyVerify.com.ng.  
   
The website offers a myriad of data services, including personal data such as NIN, Bank Verification Number (BVN), driving licence, international passport, company details, Tax Identification Number (TIN), Permanent Voter Card (PVC) and phone numbers.

PIN Senior Officer, Programmes, Khadijah el-Usman, stated that the investigation showed the website was visited 567,990 times in February 2024 and 188,360 times in April.
   
Executive Director of PIN, ‘Gbenga Sesan, lamented that with just N100, original sensitive data of the President, Vice President, ministers, governors, legislators and citizens could be purchased from unauthorised websites claiming to hold and provide access to citizens’ sensitive personal and financial data. Sesan noted that the economic impact was immeasurable and that it was only a matter of time “before it becomes a major risk.”
   
He warned that the dissemination of such information could lead to identity theft, financial fraud and other malicious activities, including targeting data owners by burglars, kidnappers or terrorists, who buy data including home addresses.
   
PIN called on the government to take immediate and decisive action to address the issue to prevent further data breaches as well as raise public awareness about the risks associated with data breaches and provide guidance on how individuals could protect themselves.