In a recent revelation that has sparked widespread concern, Paradigm Initiative has uncovered a disturbing trend involving unauthorized websites purporting to possess and sell sensitive personal and financial data of Nigerian citizens for as little as 100 Naira. This alarming discovery not only represents a blatant violation of individuals’ privacy rights but also poses significant risks to both affected citizens and the national economy.
On March 16, 2024, Fij.ng, an online media outlet, published an exposé titled “ALERT: XpressVerify, a Private Website, Has Access to Registered Nigerians’ Data and Is Making Money From It.” The investigation detailed how www.XpressVerify.com.ng had unlawfully obtained and commercialized personal data belonging to Nigerian citizens for personal profit. Despite prompt removal of the website, Paradigm Initiative has taken proactive steps towards seeking legal recourse on behalf of affected individuals.
Subsequent investigations following the XpressVerify incident unveiled another alarming player in the digital sphere: AnyVerify.com.ng. This website, operational since November 2023, has been identified as actively engaged in the illicit trade of Nigerians’ personal and private data. Detailed examination of its operations revealed a disturbing array of services offered, ranging from National Identity Numbers (NIN) and Bank Verification Numbers (BVN) to driving licenses, international passports, company details, Tax Identification Numbers (TIN), Permanent Voter’s Cards (PVC), and phone numbers. Shockingly, each data request is priced at a mere 100 Naira, making sensitive personal information accessible to any interested party.
“The gravity of this issue cannot be overstated,” emphasized Paradigm Initiative. “The unauthorized access and dissemination of such personal data not only violate the constitutional right to privacy but also expose individuals to heightened risks of identity theft, financial fraud, and other malicious activities.” The potential consequences extend further to include physical security risks, with criminals possibly exploiting leaked data to target individuals for crimes such as burglary, kidnapping, or even terrorism.
Furthermore, the economic ramifications of these breaches are profound. Instances of digital manipulation and fraudulent transactions have already caused substantial financial losses to Nigerian financial institutions, eroding public trust and stability in the banking system. This underscores the urgent need for robust data protection laws and effective enforcement mechanisms to safeguard citizens’ personal information from exploitation.
In response to these critical developments, Paradigm Initiative, in collaboration with its legal partners at Vindich Legal, has initiated legal action. A pre-action notice has been served to several key government agencies, including the National Identity Management Commission (NIMC), Nigeria Data Protection Commission (NDPC), Nigeria Immigration Service (NIS), Federal Inland Revenue Service (FIRS), Central Bank of Nigeria (CBN), Independent National Electoral Commission (INEC), Federal Road Safety Corps (FRSC), and the office of the Attorney General of the Federation (AGF).
The core concerns highlighted by Paradigm Initiative encompass not only the immediate threats to privacy and economic stability but also broader implications for national security. The compromised data, including driver’s license information and other personal identifiers, could potentially be leveraged by criminal elements to undermine national security, posing a direct threat to the safety and stability of the nation.
In seeking redress through the legal system, Paradigm Initiative has articulated specific court reliefs aimed at addressing these violations comprehensively. These include declarations of constitutional breaches, mandates for thorough investigative reports, and directives for restitution and compensation to affected individuals. The organization is resolute in its stance that robust legal measures and stringent regulatory frameworks must be enforced to deter future infringements and safeguard the integrity of Nigeria’s data infrastructure.
“This crisis demands a unified response,” urged Paradigm Initiative. “We call upon all stakeholders – government agencies, financial institutions, private sector entities, media organizations, researchers, and civil society groups – to join forces in combating this pervasive threat to data privacy. Protecting the personal information of Nigerian citizens is not just a legal or ethical imperative but a collective responsibility essential to restoring public trust and ensuring the resilience of our nation’s data ecosystem.”
As Nigerians have entrusted their personal data to government agencies under a social contract that guarantees security, it is imperative to act decisively against threats posed by malicious actors seeking to exploit vulnerabilities in data protection. Only through concerted efforts and robust governance can the integrity of citizens’ personal information be preserved, ensuring a safer and more secure digital future for all.
