CVR Data Controversy: INEC, DSS Investigate Unauthorised Release Of Voter Information

The Independent National Electoral Commission (INEC) has launched an investigation into allegations of unauthorised access to its Continuous Voter Registration (CVR) database following the circulation of information relating to a candidate in a recent political party primary election in the Federal Capital Territory.

In a statement issued on Tuesday by Mohammed Kudu Haruna, National Commissioner and Chairman of the Information and Voter Education Committee (IVEC), the commission said it takes the allegations seriously and has commenced a thorough probe to determine the circumstances surrounding the incident.

INEC explained that, as part of the ongoing nationwide CVR exercise, authorised registration officers were granted controlled access to specific components of the registration system to enable them register new voters, process transfers and update voter records. According to the commission, such access is strictly limited to official duties and is withdrawn after the exercise.

The commission disclosed that preliminary investigations, aided by its audit trail system, have enabled it to identify the user account through which the information was accessed. It added that relevant personnel have already been questioned and all units connected to the incident are cooperating with investigators.

INEC said it is examining the technical, administrative and operational aspects of the case to determine individual responsibility, establish how the credentials were used and ascertain whether any internal access-control protocols were breached.

However, the commission stressed that initial findings show there was no external breach of its CVR database, no hacking incident and no unauthorised external access to its information and communication technology infrastructure.

Rather, it said the information was accessed using valid credentials assigned to personnel involved in the ongoing voter registration exercise but was subsequently released without authorisation.

ALSO READ: 2027: Tinubu’s Re-election, My Number One Project- Oborevwori

“The incident under investigation relates to the retrieval of a specific voter record and does not indicate any compromise of the commission’s broader voter registration infrastructure or the personal data of over 90 million registered voters,” the statement noted.

INEC reiterated its commitment to safeguarding voter information, stressing that the security, confidentiality and integrity of voter data remain a top priority.

The commission also revealed that the Department of State Services (DSS) has independently commenced an investigation into the matter. It pledged full cooperation with security agencies and vowed to pursue legal action against any individual found culpable.

INEC urged members of the public and the media to disregard speculation while investigations are ongoing, assuring Nigerians that it will make its final findings and any corrective measures public in due course.