Nigeria’s National Identity Management Commission (NIMC) has pointed Nigerians and organisations to its NIN Authentication Service (NINAuth) as the agency responds to fresh claims that the country’s National Identification Number (NIN) database was breached.
NIMC disclosed this in a statement signed by its Head of Corporate Communications, Kayode Adegoke, on September 23, 2026, after a video circulated on WhatsApp and X alleging unauthorized access to NIN data. The Commission described the claim as false and said the video recycled allegations that had previously surfaced in 2024.
“The Commission National Identity Database (NIDB) has not been breached or compromised at any point. NIMC maintains robust, multi-layered security infrastructure to protect the personal data of every registered citizen and legal resident, in line with international best practice,” the Commission said.
While NIMC said its National Identity Database had not been compromised, it highlighted NINAuth as the official channel for identity verification, allowing users to authorize the sharing of their information for services that require identity checks.
Also check : NECO releases 2026 SSCE result. Here’s how to check your result
What led to NINAuth
NIMC did not say that the latest breach claims prompted the development of NINAuth. The service was actually launched in May 2025 as a digital platform for NIN authentication and verification. NIMC said at the time that the system was designed to provide user-consented verification across government and private-sector services.
“NIMC recently launched NIN Authentication (NINAuth), described as a cutting-edge suite of services spanning web, API, and mobile verification, designed to enhance data security, protect privacy, and simplify access to government services,” the statement said.
The September statement comes as concerns over the security of Nigerians’ identity information resurfaced online.
NINAuth requires the NIN holder’s consent before information is shared for Know Your Customer (KYC) or other verification processes. Its official platform allows users to verify their identities through web, API and mobile services.
NINAuth puts consent at the centre of verification
NINAuth is designed to reduce the need for organizations to collect and handle raw NIN information during identity checks. NIMC says users can approve specific data requests through the platform, while organizations receive verified identity information for the purpose of completing a transaction.
The platform also allows users to verify their identities through QR codes and share codes, while NINAuth’s enterprise system requires participating organizations to meet data-protection and security requirements.
This approach is consistent with Nigeria’s Data Protection Act 2023, which establishes requirements for lawful, transparent and secure processing of personal data and recognizes consent as one of the legal bases for processing.
The development comes as Nigeria expands its digital identity infrastructure. NIMC’s 2026 Act gives the Commission a broader role in secure digital identity, authentication and interoperability across government and private-sector platforms, while requiring stronger safeguards for personal data.
NINAuth is already being expanded beyond basic identity checks. In June 2026, NIMC said the platform could give users access to identity-linked records including Tax ID, NHIA, NELFUND and Credicorp information, while also allowing users to download their official NIN slips through the app.
For Nigerians, the significance is that the NIN is increasingly becoming a gateway to multiple public and private services. NIMC said more than 121 million NINs had been issued as of June 2025, making the security and controlled sharing of identity data increasingly important as more services depend on digital verification.