Connect with us

E-Business

Data Breach: NIMC Restricts Licensed Agents’ Access to NIN Database

Published

on

Kindly share this post

National Identity Management Commission (NIMC) has restricted its licensed agents’ access to the National Identification Number (NIN) database.

data-breach.jpg

This followed the findings of the investigation by the Nigeria Data Protection Commission (NDPC), according to Leadership.

Recall that a report by FIJ had alleged that expressverify.com, a private website, has unrestricted access to the NINs and personal details of every registered Nigerian. It added that, the website has monetised the recovery of NINs and personal information on the Nigerian identification database.

The NDPC, which is investigating the incidence of data breach at NIMC, averred that, the ongoing investigation has revealed that a third party which, among others, was originally authorised to provide verification services to citizens and genuine businesses might have allowed expressverify.com to use its NIN verification credentials to conduct verification.

The NDPC added that the ongoing investigation by relevant agencies seeks to establish the medium through which expressverify.com obtained the credentials of bona fide third parties and to determine the liability of persons involved in line with extant laws.

“At the moment, data processing by licensees generally are to be scrutinized and only those that are cleared based on credible evidence of regulatory compliance will be permitted to carry out NIN verification going forward.

“Furthermore, a series of intensive training will be conducted to ensure that personnel and licensees are abreast of the duty of care and the standard of care mandated by the Nigeria Data Protection Act, NIMC’s Privacy Policy, and other relevant regulatory protocols,” it said.

While noting that the circumstances surrounding this permission are still under investigation, the Commission in a statement said, “To remedy this incident, the National Identity Management Commission (NIMC), in line with established remediation protocols, barred all forms of access to its database.

“Though necessary, barring all forms of access affected all genuine and crucial verification requests. After a painstaking review, limited access has been granted to a few establishments that are providing pivotal public services such as education and security.”

The NDPC called on members of the public to see NIN as essential data for sustainable development.

According to the  commission, while existing technical and organizational measures are being strengthened to ensure the protection of this data, citizens need to ensure that they are not left unidentified in various frameworks for development.


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

E-Business

CrediCorp Partners FintechNGR to Drive Consumer Credit Initiative

Published

on

Kindly share this post

Nigerian Consumer Credit Corporation (CrediCorp), has partnered Fintech Association of Nigeria (FinTechNGR) to drive consumer credit scheme initiative through a robust payment platform that would be provided by members of FinTechNGR.

Speaking at a Social Meet in Lagos, organised by FinTechNGR, with the theme: “Augmenting the Future, AI, Credit and Transformation of Nigerian Finance,” the Chairman, CrediCorp Board of Directors, Aderemi Abdul-Bojela, said members of FinTechNGR would have specific roles to play in the partnership, in the areas of providing robust platform for money transfer, technology evaluation, among others.

“Today, CrediCorp is engaging with members of FinTechNGR in a social interactive gathering to discuss collaboration and support for the growth of Consumer Credit Corporation in Nigeria. We want to interact to understand how technology will drive the crediCorp initiative in Nigeria and also to understand the role that members of FinTechNGR will play in all of these initiatives around CrediCorp,” Abdul-Bojela said.

Describing the partnership as a welcome development that will enhance savings culture among Nigerians, the Chief Operating Officer (COO) of FinTechNGR, Dr. Babatunde Obrimah, said: “FinTechNGR is an enabler of technology advancement in Nigeria. We bring the players together to drive technology innovation.

“Our role in the FinTechNGR-CrediCorp partnership is to ensure that our members support the growth of consumer credit in Nigeria, by providing the relevant payment platforms for all financial transactions among the banks who are the lenders, the customers who are the burrowers and the CrediCorp who is the guarantor.”

Speaking about the benefits for Nigerians, Obrimah said the Consumer Credit Corporation in Nigeria would enhance the country’s credit culture and enable Nigerians to save and plan well with their savings. “The initiative will address inflation, help in liquidity flow, build trust in customers’ borrowing, boost credit culture and enhance the culture of savings among Nigerians,” Obrimah said.

Addressing the issue of risk and consumer trust, Abdul-Bojela said the CrediCorp has put measures in place to ensure that the banks that would be involved in lending, would be protected and guaranteed of the repayment of the loans within the CrediCorp ecosystem.

He said there would be an independent management that would ensure that the right technology is put in place to recover all monies.


Kindly share this post
Continue Reading

E-Business

NITDA to Integrate of Digital Literacy into School Curriculum

Published

on

Kindly share this post

Kashifu Abdullahi, director general of the National Information Technology Development Agency (NITDA), announced plans to integrate digital literacy into Nigeria’s education system, to achieve a 70% literacy rate by 2027 and 95% by 2030.

NITDA to Integrate of Digital Literacy into School Curriculum

Kashifu Abdullah, DG, NITDA

The NITDA’s DG made the announcement on Wednesday in Abuja during a media parley.

He stated that in order to include digital literacy in the curriculum at all educational levels, from kindergarten to university, the Agency was collaborating with the Federal Ministry of Education.

Abdullahi, said that this program would equip Nigerians with the digital know-how and abilities they need to succeed in the digital economy.

He emphasized that NITDA would also launch the “Digital Literacy for All Initiative” to educate Nigerians outside the formal education system and provide access to quality digital content.

Nigeria would train over two million young people in in-demand IT skills in order to become significant global outsourcing hub

NITDA is also collaborating with the Defence Headquarters and security agencies to develop digital solutions to address security concerns, including the use of drones, artificial intelligence, and other digital resources to combat banditry, abduction, and terrorism, he said.

 

According to him, the agency’s draft SRAP 2.0 plan aims to establish Nigeria as a digitally empowered nation, with a focus on innovation, national prosperity, and inclusivity.

The director general of NITDA added that, if successfully implemented, this strategy could propel Nigeria into a new phase of digital empowerment and leadership in the global digital economy.


Kindly share this post
Continue Reading

E-Business

Experts Highlight Trusted Relationships as Key Vector

Published

on

Kindly share this post

In 2023, more than 1/5 of cyberattacks persisted for over a month, the annual Kaspersky Incident Response 2023 report has revealed, with trusted relationships emerging as one of the main attack vectors in these prolonged cases.

The report draws on the results of Kaspersky’s cyberattack investigations throughout the year, gathered when supporting organisations sought incident response assistance or when hosting expert events for their internal incident response teams.

Primary reasons of organisations approaching Kaspersky Incident Response team with service requests were encrypted files (32.8% of requests), suspicious activities (31%), data leakage (20%), and also included non-authorised accesses (3%), service unavailability (3%) and money theft (1.6%).

Among initial attack vectors of the investigated incidents were exploiting public facing application (42.4%), compromised accounts and BruteForce attacks (28.8% in total), trusted relationships (6.78%), phishing (5%), insider’s activity (3.4%).

Kaspersky Incident Response 2023 report indicates that long-lasting cyberattacks that persist for more than a month constituted 21.85% of the total, increasing from 2022 by 5.55%.

One notable trend observed in these attacks was the exploitation of trusted relationships as a primary vector. Compromises leveraging trusted relationships have occurred previously, but in 2023 their frequency increased.

As this method of attack enables threat actors to infiltrate multiple victims through a single compromised organisation, investigative teams face several additional challenges. Firstly, initially targeted organisations don’t always recognise the importance of thorough investigations and may be reluctant to cooperate.

Secondly, attacks initiated through trusted relationships often require more time to progress from the initial intrusion to the final incursion phase. Therefore 50% of these attacks lasted more than a month. A similar proportion of attacks exceeding one month were exclusively registered within the insider and phishing vectors.

“Our latest findings underscore the critical role of trust in cyberattacks. In 2023 and for the first time in recent years, attacks through trusted relationships were among the three most used vectors. Half of these incidents were discovered only after a data leak had been found.

“By exploiting trusted relationships, threat actors can prolong attacks and infiltrate networks for extended periods, posing significant risks to organisations. It’s imperative for businesses to remain vigilant and prioritise security measures to safeguard against such sophisticated tactics,” comments Konstantin Sapronov, Head of Global Emergency Response Team at Kaspersky.

 


Kindly share this post
Continue Reading

Trending