…Says Access Came Through Valid Internal Credentials
…Staff Questioned as Investigation Intensifies
…Over 90 Million Voter Records Reportedly Remain Intact
Daud Olatunji
The Independent National Electoral Commission (INEC) has ruled out any external cyberattack in the controversy surrounding the alleged leak of voter registration data linked to a media aide of the Minister of the Federal Capital Territory, Nyesom Wike, insisting that access to the disputed information was obtained through valid internal credentials.
The Commission, however, confirmed that a full-scale investigation has been launched into how restricted voter data was accessed and allegedly circulated online, sparking fresh concerns over the security and handling of Nigeria’s electoral database.
The controversy centres on Lere Olayinka, spokesperson to the FCT Minister, who reportedly shared what appeared to be voter registration details of Nollywood actor and former House of Representatives candidate, Emeka Ike, on social media platform X.
The post, which referenced details allegedly drawn from INEC’s internal Continuous Voter Registration (CVR) platform, was used to question Ike’s political movement from Imo State to the Federal Capital Territory ahead of his electoral ambition.
It has since generated widespread criticism over alleged breaches of voter privacy and the exposure of sensitive personal information.
… No External Hack, Says INEC
In a statement on Tuesday, the National Commissioner and Chairman of the Information and Voter Education Committee, Mohammed Kudu Haruna, said preliminary findings showed there was no external intrusion into INEC’s ICT infrastructure.
He explained that the incident did not result from hacking, but from access obtained through valid internal credentials assigned to authorised personnel involved in the ongoing Continuous Voter Registration exercise.
According to him, audit trail analysis had already identified the user account linked to the access, while affected staff members were being interrogated as part of efforts to determine the level of internal breach and ensure accountability.
INEC stressed that the incident involved the retrieval and alleged unauthorised dissemination of a specific voter record, not a compromise of the national voter register, which it said contains data of over 90 million registered voters.
The Commission assured that its ICT systems remain secure and that the integrity of the national voter database was not compromised.
It added that access to the CVR platform is strictly controlled, time-bound, and automatically revoked after assigned duties are completed, in line with established security protocols.
INEC also confirmed that the Department of State Services (DSS) has launched a parallel investigation into the matter, pledging full cooperation with security agencies to ensure that anyone found culpable is sanctioned.
The electoral body urged the public to avoid speculation, noting that further details, including possible disciplinary or legal actions, would be communicated after investigations are concluded.
INEC further disclosed that staff members linked to the access trail are currently being questioned as investigators intensify efforts to establish how voter information allegedly found its way into the public domain.
The Commission said while the broader voter register remains intact, the incident underscores the need for stricter internal controls and compliance with data protection standards.
Emeka Ike threatens court action
Meanwhile, Emeka Ike has threatened legal action over the alleged exposure of his personal voter information, describing the publication as “shocking and unacceptable.”
More details here...
