INEC Denies Database Breach, Launches Probe Into Alleged Voter Data Leak
Davidson Ogbebor
Abuja, -The Independent National Electoral Commission (INEC) has dismissed claims that its Continuous Voter Registration (CVR) database was hacked, stating that preliminary investigations show no evidence of an external breach of its information technology infrastructure.
In a press release issued on Tuesday, the electoral body said it had commenced a comprehensive investigation following allegations circulating on social media and in sections of the media regarding unauthorized access to voter information and the publication of details relating to a candidate who participated in a recent political party primary election in the Federal Capital Territory (FCT).

According to INEC, the matter is being treated with utmost seriousness, with investigators already examining the circumstances surrounding the incident.
The Commission explained that, as part of the ongoing nationwide CVR exercise, designated registration officers were granted controlled access to specific sections of the voter registration system to facilitate voter registration, record updates, and transfer requests. Such access, it noted, is strictly tied to official duties and is withdrawn once the exercise concludes.

INEC disclosed that its preliminary audit trail has identified the user account through which the information was accessed. Officials connected to the incident have been questioned, while relevant departments are cooperating fully with the investigation.
“The Commission is examining all technical, administrative and operational factors associated with the matter in order to establish individual responsibility and determine the circumstances surrounding the use of those credentials,” the statement said.
The electoral umpire emphasized that findings so far indicate there was no hacking incident, external intrusion, or compromise of the broader CVR database. Rather, the information in question was reportedly accessed through valid credentials assigned to personnel involved in the ongoing voter registration exercise and subsequently disclosed without authorization.
INEC further clarified that the incident under investigation relates only to the retrieval of a specific voter record and does not suggest any compromise of the personal information of more than 90 million registered voters contained in its database.
Reaffirming its commitment to data protection, the Commission stated that the security, confidentiality and integrity of voter information remain paramount and that measures are in place to safeguard citizens’ personal data.
Meanwhile, the Department of State Services (DSS) has also commenced an independent investigation into the matter. INEC pledged full cooperation with security agencies and vowed to ensure that anyone found culpable faces appropriate legal action.
The Commission urged members of the public and the media to avoid speculation while investigations continue, assuring Nigerians that the outcome of the probe and any subsequent actions would be made public in due course.
The statement was signed by Mohammed Kudu Haruna, National Commissioner and Chairman of the Information and Voter Education Committee (IVEC).
