The Independent National Electoral Commission (INEC) has launched an investigation into allegations of unauthorized access to its Continuous Voter Registration (CVR) database following the circulation of information linked to a candidate who participated in a recent political party primary election in the Federal Capital Territory (FCT).
In a statement signed by National Commissioner and Chairman of the Information and Voter Education Committee, Mohammed Kudu Haruna said the commission had commenced a thorough probe to determine the circumstances surrounding the incident.
According to him, registration officers participating in the ongoing nationwide CVR exercise were granted controlled access to designated sections of the database to facilitate voter registration, transfers, and updates of voter records. The Commission stressed that such access is strictly limited to official duties and is withdrawn once the exercise ends.
National Commissioner disclosed that preliminary investigations and audit trails had enabled it to identify the user account through which the information was accessed. Relevant personnel have since been questioned, while departments connected to the incident are cooperating with investigators.
He noted that it is examining all technical, administrative, and operational aspects of the matter to establish responsibility, determine whether internal access-control protocols were breached, and take appropriate action against anyone found culpable.
However, the Commission clarified that its preliminary findings show there was no external breach of the CVR database, no hacking incident, and no unauthorized access to its Information and Communication Technology (ICT) infrastructure.
Rather, the Commission said the information was accessed using valid credentials assigned to personnel involved in the ongoing voter registration exercise and was subsequently released without authorization.
Mohammed further stated that the incident involved the retrieval of a specific voter record and did not suggest any compromise of its broader voter registration system or the personal data of more than 90 million registered voters nationwide.
Reaffirming its commitment to data protection, the Commission emphasized that the security, confidentiality, and integrity of voter information remain a top priority.
The Commission also revealed that the Department of State Services (DSS) has independently commenced an investigation into the matter. INEC pledged full cooperation with security agencies and vowed to pursue legal action against any individual found responsible for wrongdoing.
INEC urged members of the public and the media to disregard speculation while investigations continue, assuring Nigerians that it would make its final findings and any subsequent actions public in due course.
