INEC opens investigation into CVR database breach

The Independent National Electoral Commission (INEC) has launched an investigation into allegations of unauthorized access to its Continuous Voter Registration (CVR) database following reports of a voter’s information leakage without approval.

INEC stated that preliminary findings from its audit trail indicate that the data in question was accessed using valid login credentials assigned to accredited personnel engaged in the ongoing voter registration exercise.

The Commission added that a full-scale inquiry has been initiated to establish the exact circumstances surrounding the incident, determine how the credentials were used, and identify any breaches of internal access-control procedures.

In a statement issued via its social media handle on Tuesday, the National Commissioner and Chairman of the Information and Voter Education Committee (IVEC), Mohammed Haruna, said the Commission is treating the allegation with utmost seriousness and has immediately commenced a thorough investigation to establish all relevant facts.

He explained that INEC is also reviewing technical, administrative, and operational aspects of the CVR system to determine individual responsibility and assess whether internal protocols governing data access were violated.

According to him, appropriate disciplinary and legal measures will be taken against any staff or personnel found culpable after the conclusion of the investigation.

Haruna clarified that preliminary audit findings show no evidence of external intrusion into the Commission’s ICT infrastructure, stressing that there was no hacking incident or unauthorized access from outside INEC’s systems. Rather, the issue appears to stem from the use of legitimate credentials by authorized personnel, which were allegedly used beyond their approved scope.

He noted that the incident relates only to the retrieval of a specific voter’s record and does not indicate any compromise of the broader voter registration database, which contains data on over 90 million registered voters nationwide.

The Commission reaffirmed its commitment to the security, confidentiality, and integrity of voter information, stating that it remains dedicated to upholding transparency and protecting citizens’ personal data at all times.

Meanwhile, the Department of State Services (DSS) has reportedly commenced its own independent investigation into the matter. INEC said it will fully cooperate with security agencies and ensure that anyone found responsible is handed over for appropriate legal action.

The Commission also urged members of the public and the media to refrain from speculation while investigations are ongoing, assuring that it will keep Nigerians informed of its findings and any subsequent actions taken.