The integrity of Nigeria's electoral commission INEC is being questioned after voter registration data from the continuous voter registration database was publicly posted online. Despite widespread public outcry, the post containing sensitive electoral data remains visible and has not been taken down.
The data breach exposed registration details of an individual from INEC's database, raising alarm about who has access to the commission's infrastructure. Critics argue that if one person's data can be exposed publicly, the security of the entire voter registration system is in question.
INEC issued a statement in response to the incident, but notably failed to identify the individual responsible for the breach. This omission has drawn sharp criticism from analysts who describe the statement as cowardly and insufficient given the severity of the situation.
The fact that the offending post remains online despite the outcry and INEC's own statement is being interpreted as evidence of confidence in state protection. Critics argue that no one would leave such damaging material publicly visible unless they believed there would be no consequences.
Preliminary findings from INEC's investigation have not satisfied those calling for accountability. The commission's critics maintain that the breach demonstrates that people have unauthorised access to INEC's critical national infrastructure, and that the integrity of coming elections cannot be guaranteed.
The incident comes at a sensitive time for Nigerian democracy. With elections approaching, public confidence in the electoral system is essential. The exposure of voter data, regardless of whether it was a single case or indicative of wider vulnerabilities, undermines the trust that citizens need to have in the electoral process.
Civil society organisations and opposition figures are demanding a thorough and transparent investigation into how the data was accessed and by whom. They argue that INEC must demonstrate that its systems are secure and that any individual found to have breached data protection protocols faces appropriate legal consequences.