jmoore:
Someone in NIMC made their database accessible to cronies via api.

Patami

Personnel in NIMC made their database accessible to cronies via other means best know to them. Some civil servants in this Nation are very wicked. They can do anything to get additional income by all means.

The developer and web site designers should be held accountable for any compromised and bridge of trust.

jmoore:
Someone in NIMC made their database accessible to cronies via api.

Leave rhe clown denying that the data was not given out ,

In few years to come it will be difficult to run Nigeria if the country don't have competent leaders.
Technology and society are becoming more sophisticated and complex to be left in the hands of mediocre.

Kusheer:
Nigeria Voters card and Verify BVN full Basetools

Just 10k naira lol

😂😂😂😂😂😂
Bad guy
How do I contact you ?

I visited the site and found out that they were actually using phishing method to get those data,first of all it’s the victims that give out their information,to start with ,anyone who would
Want to use the site from the start is a criminal if not what do want to gain by wanting to access someone’s information,they inturn ask
You to input
Your nin name and password during
Registration,at that point t you are registering with them ,you own
Data is being captured ..ntooooh

Kindly chat me up for Fresh company Log

Arrest those involved and block the website

The portal might have been created by some bad eggs among NIMC staff.

So una never arrested the mallam behind that verify website ?

We deceive ourselves so much in this country. Who gave them API to the database.

Are they not supposed to institute a legal case against them? So internet users at risk anytime they obserfer something like this?

What are they warning Nigerians??

Why can’t they block the websites instead of coming out to tell us nonsense

oluxy:


Imagine warning instead of them to arrest and close the site, nimc is warning, nawa o.
Where is the law that's supposed to do justice to the site owners?

No it doesn’t work that way ! Even the United States data base is being breached and personal data’s are being sold and nothing could be done about it even till now .
You won’t know who is behind it! The server host are mostly run from another country using an unidentified source completely private . It takes time to unravel the source and do something .. except if it’s a quack set up by a learner in Nigeria, then they can get them easily

mining or your API is porous nd easily accessible

BrutusOj:
Are they not supposed to institute a legal case against them? So internet users at risk anytime they obserfer something like this?

No it doesn’t work that way ! Even the United States data base is being breached and personal data’s are being sold and nothing could be done about it even till now .
You won’t know who is behind it! The server host are mostly run from another country using an unidentified source completely private . It takes time to unravel the source and do something .. except if it’s a quack set up by a learner in Nigeria, then they can get them easily

Harvesting or trying to harvest,which one NIMC?

jmoore:
Someone in NIMC made their database accessible to cronies via api.

If NIMC could not make its database DIFFICULT TO HACK, why then would it ask people to provide their biodata to NIMC?

Na so...


As if any of dem dey innocent of profiting from people's data.

Awón oni yéyé

phemmyjohnson:


No it doesn’t work that way ! Even the United States data base is being breached and personal data’s are being sold and nothing could be done about it even till now .
You won’t know who is behind it! The server host are mostly run from another country using an unidentified source completely private . It takes time to unravel the source and do something .. except if it’s a quack set up by a learner in Nigeria, then they can get them easily

Hmmm..we are at the mercy of God only then.

Animal Farm by George Orwell

16k hmm oo,na only aza boys still dey buy and wear clothes for that amount ooo. Abeg when u go release am? So that aba boys fit reduce the price to 1500

Noniblaq1:
Omo as we speak, almost all the boutique owners in Abuja don Dey vex for me, because say I slash down the prizes of all my clothings.

With only 16k, you get quality outfit for my store, we deliver Nationwide with free delivery. see my profile topic if interested

jmoore:
Someone in NIMC made their database accessible to cronies via api.

inside job

I'm suspecting all these dubious loan companies are responsible

Arrest the bastards asap

Join this new project
https:///RichQuestBot/app?startapp=5901975260
Do quizzes to earn US dollars, easily earn 1 US dollars in 1 minute, and anyone who click our Mini App will get 10 US dollars.

dre11:

The National Identity Management Commission (NIMC) has warned Nigerians against the activities of some unauthorised websites harvesting people’s data

The websites are idfinder.com.ng, Verify.ng, championtech.com.ng, trustyonline.com, and anyverify.com.

The NIMC gave the warning in a statement signed by Kayode Adegoke, its head of corporate communications, on Saturday.

On June 20, Paradigm Initiative, a pan-African social enterprise, raised alarm over its discovery of the sale of national identification numbers (NINs), bank verification numbers (BVNs), and other personal data of Nigerians on a website for as low as N100.

According to the organisation, a website known as ‘AnyVerify.com.ng’ was discovered to be involved in the commercial distribution of personal and private data of Nigerians.

Paradigm Initiative added that several unauthorised websites are claiming to hold and provide access to sensitive personal and financial data of Nigerian citizens “for as little as 100 Naira”.

“This alarming development presents a major breach of the fundamental rights to privacy, a breach of data privacy rights, and poses significant risks to individuals and the national economy,” the firm said.

Reacting to the report, the commission said AnyVerify.com.ng and other aforementioned websites are data harvesters and unauthorised to access or manage sensitive data.

The agency also denied the exposure of sensitive data of Nigerians “as alleged and reported”.

“The commission, at this moment, assures the public that the data of Nigerians has not been compromised, and the Commission have not authorised any website or entity to sell or misuse the National Identification Number (NIN) amongst all the identities stated in the report,” NIMC said.

“NIMC urges the public to disregard any claims or services these websites offer and should not give their data as they are potentially fraudulent and data provided by the public on such websites are gathered and stored to build the data services they illegally provide.

“Consequently, the public should know that the commission has taken robust measures to safeguard the nation’s database from cyber threats- a secure, world-class, full-proof database is in place.

“The commission’s infrastructure meets the stringent ISO 27001:2013 information security management system standard, with annual recertification and strict compliance with the Nigerian Data Protection Law.”

NIMC also advised Nigerians to avoid giving their data to unauthorised and phishing sites, stressing that licensed partners or vendors are not authorised to scan or store NIN slips but to verify them through approved channels.

“This poses the danger of data harvesting and comprises individual data,” the commission added.

“The Commission reaffirms its commitment to upholding ethical standards in data protection in line with federal government directives and data privacy regulations.”

NIMC also said it is currently working closely with security operatives to apprehend elements masquerading as online vendors, and make them face the full wrath of the law.

The agency urged the public to remain vigilant against false information and rely on verified sources for accurate updates.


https://www.thecable.ng/idfinder-com-ng-verify-ng-nimc-warns-of-websites-harvesting-data-of-nigerians/amp/

The Intelligence Agencies should have moved stealthily to get all the culprits behind this breach of sensitive personal data arrested.

This isn't the FIRST time that these reports of the National ID data breaches have manifested. It's been in the public domain even before the years 2023 and 2024!

jmoore:
Someone in NIMC made their database accessible to cronies via api.

Sometimes when people comment I just wonder as to why they say what they say. Haven’t you heard or read where hackers hack database? Even without the help of any insider, a good hacker can and will hack anything.

I will not be surprised if insert trigger is created along with the database,that directly stores every data on another server.
I doubt, If it's the issue of leaked APIs. cos,it would have been blocked long time ago.

One way they get all this data is from fake job application openings (like the current WAEC vacancies claimed to be going on for their offices in Ghana and Nigeria) and palliative disbursement registrations.

How can WAEC be using .com.ng to run job applications for ghana offices? when they have a .org? and other links in the website are not working.

Then those davido 500GB Giveaway whatsapp messages. Oh! lastly, fake loan apps.



BUT POLICE NO GET DATABASE LIKE THIS! CHAI!
SAD!

Ihasi:
The man above me took the word out of my mouth

Get a SUPER Professional Company Logo Or Letterhead for your Business for 2k Only

PAY AFTER SERVICE

Drop us Your Company name for your Logo
https://forms.gle/Zh3FTn28SmhtdMqL9

What did you want to say
Talk true!!