CelestineNelson:
However, XpressVerify is not one of the Commission's licensed partners...Tor una don here

MT:
This means there are no technical people who are competent at NIMC.

How did XpressVerify API interface with the national data which suppose to require authentication and authorization before access will be allowed.

Only God knows what they have been able to do with people's data.

Head suppose to roll with NIMC technical drivers and hard questions need to be asked.

Competent hands and robust infrastructure suppose to man sensitive data as such. I am so scared there would have been lot of identity thefts already

Neoteny:


1. They could use an existing valid API auth from a bona fide licensee and piggyback their own app on it. Most likely scenario

2. MITM attack, if the NIMC security is not robust. Less likely but quite possible

3. Internal agents via social engineering or outright compromise...very common

yesloaded:
this is a very big shame to NIMC

RealEmilokan:
... and wish to assure Nigerians and legal residents that there is no data breach of any sort and the Citizens' data is safe and secure in the Nigeria's National identity database.


Believe this statement at your own peril.

easyfem:
Seriously I don’t have prblm with all Dix thing but as tinubu is doing this now , someone will just come after 7 years and change to his own personal pattern , just like buari close border , tinubu open it , this means all the suffer common man suffer all Dix year doesn’t yield anything meaningful .

fergie001:




Earlier, the Minister of Communications, Innovation & Digital Economy, Bosun Tijani who was called out replied via X, that the NIMC was no longer under his Ministry.

However, Tijani hoped that the NIMC will work with the Nigeria Data Protection Commission to investigate the matter.



It can be recalled that the Bola Tinubu-led administration in September 2023 moved the National Identity Management Commission (NIMC) to the Ministry of Interior.

Previous Thread:
https://www.nairaland.com/8032809/xpressverify-access-nigerians-nin-data#128970590

bitbillionaire:
After taking my time to read this post, this is what I have noticed:

Director general of NIMC - YORUBA

National Commissioner, Nigeria Data Protection Commission (NDPC) - YORUBA

Minister of Communication and digital economy- YORUBA

My conclusion: nothing good could have come out of this type of reckless yorubanisation of the agencies, Parastatals and ministry that are in charge of our national identity database and I am not expecting anything positive to come out of the so called 'investigation' because na them them.

The 'unauthorized' NIN data access is unforgivable as it exposes the extreme lackadaisical attitude of the people managing it.

MT:
This means there are no technical people who are competent at NIMC.

How did XpressVerify API interface with the national data which suppose to require authentication and authorization before access will be allowed.

Only God knows what they have been able to do with people's data.

Head suppose to roll with NIMC technical drivers and hard questions need to be asked.

Competent hands and robust infrastructure suppose to man sensitive data as such. I am so scared there would have been lot of identity thefts already

Csteve9:
This website has helped lots of people to get their premium NIN cards. The data you a trying to hide is all over your socials and other documents, a deep internet search will reveal basic things you are ranting about. Nigerians always trying to sound smart ontop every matter.

Xpressverify thanks for all you did. 😘