UPDATED: INEC Probes Voter Database Breach, Quizzes ICT Personnel

‎‎The Independent National Electoral Commission (INEC) has launched an investigation into allegations of unauthorized access to its Continuous Voter Registration (CVR) database following the circulation of a voter record linked to a candidate in a recent political party primary election in the Federal Capital Territory (FCT).
‎
‎In a statement issued on Tuesday, the Commission said it became aware of reports on social media and in parts of the media alleging that its voter registration database had been compromised.
‎
‎INEC, however, stressed that preliminary findings from its investigation indicate there was no external breach, hacking incident, or unauthorized access to its information and communications technology (ICT) infrastructure.
‎
‎According to the Commission, authorized Registration Officers participating in the ongoing nationwide CVR exercise were granted limited access to specific sections of the database strictly for official duties, including registering new voters, processing transfer requests, and updating voter records.
‎
‎INEC disclosed that an audit trail from its preliminary investigation enabled it to identify the user account through which the information was accessed.
‎
‎Meanwhile, the Commission said relevant personnel have already been questioned, while all units connected to the incident are cooperating with investigators.
‎
‎The electoral body noted that its investigation is examining technical, administrative, and operational aspects of the case to determine individual responsibility and establish whether any internal access-control protocols were violated.
‎
‎“Preliminary findings indicate that the information was accessed through valid user credentials assigned to personnel involved in the ongoing CVR exercise but was released without authorization,” the statement said.
‎
‎INEC emphasized that the incident involved the retrieval of a specific voter record and does not suggest any compromise of its broader voter registration system or the personal data of more than 90 million registered voters nationwide.
‎
‎However, reaffirming its commitment to protecting voter information, the Commission said it takes the security, confidentiality, and integrity of voter data seriously and remains dedicated to transparency and institutional accountability.
‎
‎The Commission further revealed that the Department of State Services (DSS) has independently commenced an investigation into the matter.
‎
‎INEC pledged full cooperation with security agencies and warned that anyone found culpable would face appropriate legal action.
‎
‎It also urged members of the public and the media to avoid speculation while investigations continue, assuring Nigerians that the Commission will provide updates on its final findings and any measures taken in response to the incident.
‎
‎