The Independent National Electoral Commission (INEC) has commenced an investigation into allegations of unauthorized access to its Continuous Voter Registration (CVR) database following the publication of voter information linked to a candidate who participated in a recent political party primary election in the Federal Capital Territory (FCT).

In a statement issued on Tuesday by Mohammed Kudu Haruna, National Commissioner and Chairman of the Information and Voter Education Committee (IVEC), the commission said it had taken immediate steps to establish the facts surrounding the incident.

The controversy emerged after personal voter registration information relating to a candidate in the FCT surfaced online, sparking concerns about the security of voter data and the integrity of INEC’s digital infrastructure.

According to the electoral body, preliminary findings from its investigation indicate that there was no external breach of the CVR database and no hacking of the commission’s information and communications technology systems.

INEC explained that the information was accessed through valid credentials assigned to personnel involved in the ongoing nationwide Continuous Voter Registration exercise.

“As part of the ongoing CVR exercise, authorised registration officers were granted controlled access to specific components of the system to facilitate voter registration, transfer requests and updates to voter records,” the commission stated.

The commission noted that such access is strictly limited to official duties and is withdrawn once the registration exercise ends.

INEC disclosed that its audit trail had already identified the specific user account through which the information was accessed. Relevant personnel have since been questioned, while departments connected to the matter are cooperating with investigators.

The commission said it is reviewing all technical, administrative and operational aspects of the incident to determine individual responsibility and establish whether internal access-control protocols were violated.

Despite the controversy, INEC assured Nigerians that the incident was isolated and did not compromise the broader voter registration infrastructure or the personal information of more than 90 million registered voters nationwide.

“The incident under investigation relates to the retrieval of a specific voter record and does not indicate any compromise of the Commission’s broader voter registration infrastructure or the personal data of over 90 million registered voters,” the statement said.

INEC reaffirmed its commitment to safeguarding voter information, emphasizing that the security, confidentiality and integrity of electoral data remain top priorities for the commission.

The electoral body also revealed that the Department of State Services (DSS) has independently commenced an investigation into the matter.

INEC pledged full cooperation with security agencies and warned that anyone found culpable would face appropriate legal action.

The commission urged members of the public and media organizations to avoid speculation while investigations continue, assuring Nigerians that the outcome of the probe and any subsequent actions would be made public in due course.

The incident comes amid heightened political activities ahead of the 2027 general elections and renewed public interest in the protection of personal data within government institutions.

Follow BONA NAIJA for more