E-Business
Experts Ring Fear as Cyber Thieves Exploit Security Lapses
Experts in IT security have warned of a possible cyber racket insurgence in Nigeria, unless controls needed to protect sensitive data and critical infrastructure from abuse by insiders are firmly installed, Nigeria CommunicationsWeek can report. The independent Oracle users’ group survey, which first revealed that attackers exploited legitimate database access through SQL injection and stolen credentials, said laxity in the industry remains since the 2011 report. The Independent Oracle Users Group had more than 300 database and information security professionals recently surveyed on their data security practices with disturbing results. 60 per cent of respondents say data breach was most likely. Hamilton Iyoha, pre-sales consultant, Oracle Corporation, Nigeria, said over one billion records have been breached from database serves over the past six years. Iyoha said at a one-day ‘Data Security and Optimisation Summit’ hosted by Computer Warehouse Group (CWG), that the figure doubles every two years. He noted that ICT revolution in Nigeria would spur latent hullabaloo and cyber crime owing to porous nature of companies’ database in the country. Iyoha said hackers usually deploy SQL injection technique to attack databases through a website usually carried out by including portions of SQL statements in a web form entry field in an attempt to get the website to pass a newly formed rogue SQL command to the database. SQL injection is a code injection technique that exploits a-security vulnerability in a website’s software. The vulnerability happens when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and unexpectedly executed. Thus, unprotected site oftentimes dump the database contents to the attacker. Iyoha said: “With the fast growth in data generation, demand for data security will also increase in manifold. Actually, 48 per cent of data breaches are caused by insiders, 89 per cent records stolen using SQL injections. Hackers use stolen credentials; all this call for stringent security applications. “As it is now, existing IT security is not addressing database security, because only 20 per cent of companies that participated in the survey have a kind of forecast estimate,” he noted. Iyoha said CWG/Oracle partnership has provided the society with a preventive and detective control security solution that demands authentication, access control and auditing capable of blocking threats. “About 75 percent of organizations genuinely doing business encrypt their database traffic. Another 22 per cent encrypt only their database backup files; however, Oracle Advanced Security (OAS) was produced in such a way that it protects data from unauthorized users, particularly on enterprise solution base,” said Iyoha. Peter Boglo, the senior technology pre-sales consultant, Oracle, despite huge spends on IT security by Nigeria financial institutions, and operators in the oil and gas sector, tangible results are hard to come by because of inappropriate spend. “Nigerian companies, banks, IT firms, those in oil and gas spend more money on information security management and they have not gotten maximum result. So, the Oracle database 11g is an epoch-making event that spans the full range of customers need. Information security is a prerequisite for growth, confidence building and protection of stakeholders in the digital economy,” said Boglo. He notes that the “National Identity Management Scheme requires user provisioning, role management, entitlement management, and risk based access control virtual directive. Therefore, our database must be protected to avoid the impending cyber attacks.” Christy Elendu, manager, Oracle Channels Analyst representing the country manager, said that the company spent about $4.3 billion in 2011 on research and development aimed at producing best software to tackle global security threats. “Oracle has been there since 1971 which we started with proprietary system to open and standard systems and CWG has been a worthy partner. And we are committed to hardware engineering, new opportunities for partners, better solution for customers.
Uche Chigbo, coordinating director of Operations, National Identity Management Commission, (NIMC), has said the newly enacted NIMC Act strengthens data protection and privacy, expands identity coverage to include everyone in Nigeria and Nigerians in the diaspora, and provides the legal framework for a secure and trusted digital identity ecosystem.
She said the new law replaces the 2007 NIMC Act, which had become outdated due to rapid technological advancements, evolving cybersecurity threats, the growth of the digital economy, and the enactment of the Nigeria Data Protection Act.
According to her, the updated legislation better positions the Commission to deliver Nigeria’s digital identity agenda and improve access to government and private sector services.
“The Act itself has taken in a whole lot of things to make sure that NIMC is well-positioned to be able to deliver on the identity agenda and program of Nigeria. The area of universal coverage was expanded within the Act so that NIMC can enroll everybody that is within the soil of Nigeria—male, female, children, whether they are IDPs or orphans or whatever it is, and even Nigerians in diaspora.
“There is quite a lot within the Act that over the few days and weeks, even with my Director-General’s courtesy visit, we are trying to sensitize and educate the general public, and also bring awareness to this new Act so that people will know what are the rights that exist within it, what are the obligations, what are the stronger enforcement and penalties that has also been expanded within the Act, and then what are also the regulatory autonomy that has been given to NIMC to make sure that they drive the digital identity ecosystem in Nigeria,” she explained.
“There’s a lot of provisions and changes with the new Act. Um, the NIMC 2007 Act has been operating for close to 19 years now. So, we can see that, um, you can actually say it’s almost obsolete. And then with a lot of technological advancements in the world now, with the enactment of the Nigeria Data Protection Act, and then with also a lot of evolving security challenges, cybersecurity challenges, as well as the ever-growing digital economy, it became very necessary that a comprehensive review of the NIMC Act should be done.
So, that 2007 Act has been repealed and a new NIMC 2026 Act is in place,” she explained.
Chigbo clarified that the National Identification Number (NIN) is Nigeria’s unique identifier and the only valid means of identification for accessing government services.
She added that it enables secure identity verification and improves access to services.
“NIN has been designated as the unique identifier in Nigeria and then by the government of Nigeria establishing it as the only valid means of identification for assessing government services. So, NIN, it’s positioned to be a valuable tool for empowering citizens and legal residents to facilitate access to service delivery in Nigeria. And it’s also a tool for people to be able to prove their identity as they go about their daily businesses,” she said.
Speaking on identity harmonisation across government agencies, Chigbo said NIMC is integrating identity databases to enable Nigerians to access services seamlessly using the National Identification Number (NIN), while other agencies continue to issue functional identities for specific purposes.
“There’s a distinction between a foundational identity and a functional identity. NIMC provides the foundational identity, which answers the question, ‘Who are you?’ Are you a Nigerian or a legal resident? Who are you? That’s what NIMC is providing. All these other agencies that you have mentioned, they provide functional ID, which is an ID that relies on the foundational ID, where they have established who you are and then they are now trying to answer the question, ‘Are you now eligible to have these services? Are you now eligible to benefit from this transaction or scheme?’ So, those are two different distinctions.”
However, Chigbo said NIMC’s mandate is to harmonise and integrate identity systems across government, with the amended Act designating the Commission as the sole repository for biometric data.
“However, NIMC mandate is to make sure that we harmonize and integrate with all these agencies so that you’re one and the same person in any of the databases or registries that you have. The Act that has been expanded and amended also positions NIMC as the only repository for biometric data capture so that we can have effective identity management and coordination in Nigeria.
“So, that harmonization is already happening, the integration is already happening,” she stated.
She also disclosed that NIMC has introduced an online modification portal that allows Nigerians to begin the process of correcting or updating their personal information from the comfort of their homes or offices.
“But also, NIMC we have a modification portal that enables you to sit in the comfort of your home or office to be able to start the process of correction or updates of your data. We already have a self-service modification portal that allows you to make corrections,” she disclosed.
On the cost of obtaining a NIN, Chigbo clarified that enrolment and issuance of the National Identification Number are free.
She, however, noted that some other identity-related services attract approved fees, which are published on the NIMC website and paid electronically through the government Remita platform.
“Enrollment for the issuance of the National Identification Number, NIN, is free. There are other services, identity services that NIMC provide. Those ones have their charges, and those fees and charges are publicized on the NIMC website so that people can see what those charges are. And NIMC does not collect cash. Our transactions and the charges are paid electronically through the government Remita platform,” she said.
Nigeria’s data protection industry has grown into a N16.3 billion ecosystem within three years of formal regulation, according to the Nigeria Data Protection Commission (NDPC).
Olufemi Ibitayo, head of Finance Management and Control, NDPC, announced the milestone at the Regional Data Governance Exchange in Nairobi, Kenya, where he represented Dr Vincent Olatunji, national commissioner and chief executive officer, NDPC.
Presenting Nigeria’s progress, Ibitayo said the country’s strong regulatory framework and the establishment of an independent data protection authority have strengthened confidence in the digital economy and enhanced Nigeria’s reputation as a destination for foreign investment.
The Regional Data Governance Exchange, organised by the Data Governance in Africa Initiative and hosted by the Office of the Data Protection Commissioner in Nairobi, brought together African data protection authorities to strengthen institutional capacity, deepen collaboration and promote peer learning on data governance. Photo: NDPC
He said the Commission’s “Compliance First, Not Punishment” approach encourages organisations to meet their obligations through dialogue and voluntary compliance, while ensuring effective regulatory oversight.
Ibitayo added that the NDPC is developing regulatory technology solutions, a regulatory sandbox and a data privacy innovation laboratory to further strengthen Nigeria’s data governance ecosystem and support future growth.
United Nations Commission on International Trade Law (UNCITRAL)
The ongoing UNCITRAL session has brought together delegates from Nigeria, Australia, China, Ghana, France, the United States and other member states to develop harmonised legal frameworks aimed at facilitating secure, trusted and efficient cross-border digital commerce. Photo: NDPC
Meanwhile, Olatunji reaffirmed Nigeria’s commitment to global data governance during a meeting with Nigeria’s Permanent Representative to the United Nations, Ambassador Jimoh Ibrahim.
He made the remark on the sidelines of the ongoing United Nations Commission on International Trade Law (UNCITRAL), where Nigeria is participating alongside delegates from several member states to advance harmonised legal frameworks for secure and trusted cross-border digital commerce.
The NDPC boss highlighted the Commission’s achievements since its establishment, noting that strategic institutional reforms have positioned Nigeria as a leading voice in the global data protection ecosystem.
He said the country’s data protection framework has continued to earn international recognition, adding that the Commission remains committed to promoting trusted data governance as a driver of digital transformation, economic growth, innovation and sustainable development in line with the Renewed Hope Agenda of President Bola Ahmed Tinubu.
During the meeting, Ambassador Ibrahim commended the Commission’s progress since the enactment of the Nigeria Data Protection Act 2023 and called for the establishment of a comprehensive national data bank to support evidence-based policymaking, research and national development.
National Identity Management Commission (NIMC) has said thet more than 136 million Nigerians and legal residents have been enrolled in the National Identity Database (NIDB).
In a statement on Tuesday, Kayode Adegoke, head of corporate communications, NIMC, said Abisoye Coker-Odusote, chief executive officer (CEO) of the commission, announced the milestone during a courtesy visit to the ministry of budget and economic planning.
In April 2025, NIMC said over 117.36 million Nigerians had been enrolled as of February 28, 2025.
The visit was part of the commission’s ongoing stakeholder engagements with ministries, departments and agencies (MDAs) on the implementation of the NIMC Act 2026.
Presenting the new Act, Coker-Odusote said the legislation repeals and replaces the 2007 NIMC Act, modernising Nigeria’s digital identity ecosystem by positioning the national identification number (NIN) as the country’s foundational identity under the “one person, one identity” policy.
She said the law also establishes NIMC as the root certificate authority for the national digital infrastructure and introduces stronger data protection and cybersecurity measures, as well as digital credentials.
“The Federal Government remains committed to enrolling and issuing NINs to all Nigerians and legal residents within the shortest possible time,” Coker-Odusote said.
She added that NIMC is ready to collaborate with the ministry of budget and economic planning to leverage the NIN for economic planning and national development initiatives.
Speaking during the visit, Abubakar Atiku Bagudu, the minister of budget and economic planning, reaffirmed the federal government’s commitment to the implementation of the NIMC Act 2026.
Bagudu described the legislation as “a transformative milestone” that would strengthen Nigeria’s digital identity ecosystem and accelerate national planning and development.
He commended the NIMC director-general and the commission’s leadership for their efforts in securing the passage of the legislation, noting that it provides “a solid legal foundation for a trusted, secure, and inclusive national identity management system”.
The minister, however, said the true measure of the Act’s success would lie in its implementation and the benefits it delivers to Nigerians.
“The true measure of the Act’s success will lie in its effective implementation and the tangible benefits delivered to citizens,” he said.
Bagudu also called for stronger collaboration across the federal, state and local governments to build public confidence in the national identity system and eliminate the duplication of identity databases across government institutions.
He said the NIN should serve as Nigeria’s single, universally accepted identity standard, supporting efficient service delivery and good governance.
On June 26, President Bola Tinubu signed the NIMC Act 2026 into law, repealing the commission’s 2007 establishing Act.
At the time, Olubunmi Tunji-Ojo, minister of interior, said the legislation would strengthen Nigeria’s legal framework for digital identity management, cybersecurity and secure digital authentication, while reinforcing the NIN as the country’s foundational identity credential under the “one person, one identity” principle.
Court Adjourns Alleged Binance Tax Evasion Case over Settlement Talks
Fixed Wired Internet Market Lags as Mobile Gains Ground
Xenophobic Attacks: OYC Threatens to Picket MTN Nigeria Offices
New NIMC Act Strengthens Data Protection, Privacy – Director
BON Establishes Six Ad Hoc Committees to Modernize Broadcasting
NASENI Moves to Digitize CCB’s 5m Assets Declaration and Operations
Mobile Internet Gender Gap Widest in Africa – GSMA
Nigeria Launches FreeTV Nationwide
CANAL+ Partners Samsung to Pre-Load DStv Stream on New Samsung TVs In Nigeria, Other African Countries
Lebara Nigeria Launches Lebara Play, Africa’s First Telecom-Owned Micro-Drama Platform
News2 days agoNRC, Ponzi Scheme Collapses Resulting Loss of Billions of Naira
News2 days agoNSITF Partners South African Insurer on Digital Transformation
E-Financial2 days agoFCT-IRS Unveils New Digital Platform, Taxporta
General News2 days agoKPMG Urges Africa’s Most Innovative Tech Entrepreneurs to Enter the Global Tech Innovator 2026 Competition
E-Business2 days agoFG Suspends New Internet Regulations to Prevent Overlapping Rules
E-Business2 days agoNIN Enrollment Hits over 136m as New ID Law Takes Effect
E-Business2 days agoPlateau PCC Collects Nigerians’ Data without Privacy Policy – FIJ
Telecom1 day agoNCC Seeks Cost-Based Pricing Framework for Ducts