Paradigm Initiative has uncovered a shocking data breach affecting Nigerian citizens, with sensitive personal and financial data available for sale on unauthorized websites for just N100. This alarming development poses significant risks to individuals, the national economy, and national security.
The Breach
An investigation by (link unavailable) in March 2024 revealed that (link unavailable) had access to Nigerian citizens’ data and was commercializing it. Although the website was taken down, further research uncovered another actor, (link unavailable), operating since November 2023 and selling personal data, including National Identity Numbers, Bank Verification Numbers, and driving licenses, for N100 each.
Concerns and Implications
– Privacy Violation: Unauthorized access to personal data infringes on citizens’ right to privacy, potentially leading to identity theft, financial fraud, and other malicious activities.
– Economic Impact: The availability of sensitive financial data online can undermine Nigeria’s banking system, erode public trust, and lead to a financial crisis.
– National Security: The breach of driver’s license information and other personal data can compromise national security, posing a threat to the safety and security of the nation.
Legal and Ethical Implications
The existence of these websites highlights significant gaps in data protection and cybersecurity measures in Nigeria, underscoring the need for robust data protection laws and stringent enforcement mechanisms.
Government Response
The Nigerian government is urged to take immediate action to address this critical issue, including conducting a thorough investigation, enhancing cybersecurity measures, implementing the Nigeria Data Protection Act, and raising public awareness about data breaches.
Court Reliefs Sought
Paradigm Initiative is seeking legal action, including a declaration that the unauthorized access to citizens’ data violates the Constitution and the Nigeria Data Protection Act, an order for a full investigation and publication of the report, and restitution for affected data subjects.
Call to Action
We call upon all stakeholders to collaborate in addressing this data privacy crisis, protecting the personal information of Nigerian citizens, and restoring trust in our nation’s data infrastructure.
Share this
