In an advisory issued after a major data breach, the Federal Government has warned Nigerians about five websites, idfinder.com.ng, Verify.Ng/sign in, championtech.com.ng, trustyonline.com, and anyverify.com, alleged to be “unauthorised data harvesters.”
The National Identity Management Commission (NIMC), the nation’s national ID agency, which said it has identified several websites involved in alleged illegal harvesting of the identity information of Nigerians, asked members of the public to be wary of the following alleged “unauthorized data harvesters” listed as including idfinder.com.ng, Verify.Ng/sign in, championtech.com.ng, trustyonline.com, and anyverify.com.
NIMC made the statement while responding swiftly to allegations of a data breach involving sensitive information of Nigerian citizens, and dismissed claims of compromised data.
Technology Times had reported the findings by Paradigm Initiative that revealed a major data breach allegedly perpetrated by AnyVerify.com.ng, a website operating in Nigeria since November 2023.
According to the civil society organization, AnyVerify.com.ng has been trading sensitive personal and financial data of Nigerians for as little as ₦100.
NIMC stated that it has not authorised any entity to sell or misuse National Identification Numbers (NIN) or any other personal identities as reported.
“The Commission, at this moment, assures the public that the data of Nigerians has not been compromised, and the Commission have not authorised any website or entity to sell or misuse the National Identification Number (NIN) amongst all the identities stated in the report”. NIMC said in a statement.
The Federal ID agency said it identified several websites, including idfinder.com.ng, Verify.Ng/sign in, championtech.com.ng, trustyonline.com, and anyverify.com, as “unauthorized data harvesters.”
The Commission urges the public to disregard any claims or services offered by these websites, cautioning against providing personal data due to potential fraudulent activities.
The Commission explained that it has implemented stringent measures to safeguard Nigeria’s database against cyber threats by maintaining a secure and world-class infrastructure compliant with ISO 27001:2013 Information Security Management System Standard and Nigerian Data Protection laws.
NIMC advises Nigerians to avoid sharing their data with unauthorised or phishing websites, highlighting the risks of data harvesting and personal compromise. The Commission reaffirms its commitment to ethical data protection practices mandated by Federal Government directives and privacy regulations.
Furthermore, NIMC clarifies that licensed partners or vendors are only authorized to verify NINs through approved channels and are prohibited from scanning or storing NIN slips. The Commission is actively collaborating with law enforcement agencies to apprehend perpetrators posing as online vendors, ensuring they face legal consequences, the ID agency said.
NIMC wants the public to rely on verified information sources for accurate updates and remains dedicated to providing secure and reliable identity management services while safeguarding critical national assets.