Lere Olayinka: INEC Denies Hacking Claims, Investigates Alleged Unauthorised Access to Voter Database

The Independent National Electoral Commission (INEC) has responded to allegations surrounding the alleged unauthorised access to its Continuous Voter Registration (CVR) database, following reports linking the release of a voter record to a controversy involving Lere Olayinka, spokesman to the Minister of the Federal Capital Territory, Nyesom Wike.

Lere Olayinka shared details of Nollywood actor Emeka Ike’s voter registration record on social media on his X account on Saturday claiming that Mr Ike who contested for a seat in the House of Representatives to represent the Abuja Municipal/Bwari (AMAC/Bwari) Federal Constituency in the Federal Capital Territory (FCT) in the Nigeria Democratic Congress NDC primaries, was initially registered as a voter in Imo State before successfully transferring her voter registration to the Federal Capital Territory on May 15.

To support his claim, he published screenshots that appeared to have been obtained from an internal INEC portal used for managing voter registration records.

The images displayed sensitive information, including the voter identification details, application records, registration centre information, photograph, and other personal data.

In a statement issued on Monday, June 2, 2026, the electoral body confirmed that it had launched a comprehensive investigation into the incident. INEC disclosed that preliminary findings from its audit trail showed there was no external breach, hacking attack, or compromise of its ICT infrastructure. Instead, the commission said the information was accessed using valid credentials assigned to personnel involved in the ongoing CVR exercise and was subsequently released without authorisation.

The commission stressed that the incident was limited to the retrieval of a specific voter record and did not affect the personal data of more than 90 million registered voters. INEC also revealed that the Department of State Services (DSS) has commenced a parallel investigation, while assuring Nigerians that anyone found culpable would face appropriate legal consequences.

INEC’s full statement reads;

RE: ALLEGED MISUSE OF AUTHORISED ACCESS CREDENTIALS AND UNAUTHORISED DISCLOSURE OF INFORMATION FROM THE COMMISSION’S CONTINUOUS VOTER REGISTRATION (CVR) DATABASE

The attention of the Independent National Electoral Commission (INEC) has been drawn to allegations currently circulating on social media and in some sections of the media regarding the alleged unauthorised access to the Commission’s Continuous Voter Registration (CVR) database and the subsequent publication of information on a candidate in the recent primaries of a political party in the Federal Capital Territory.

The Commission takes this allegation seriously and has immediately commenced a thorough investigation to establish the facts surrounding the incident.

As part of the ongoing Continuous Voter Registration (CVR) exercise nationwide, authorised INEC Registration Officers were granted controlled access to specific components of the CVR system to enable them to register new applicants, process requests for transfer of registration and update voter records where necessary. Such access is restricted to official duties only and is withdrawn at the conclusion of the exercise.

The audit trail from the preliminary investigation has enabled the Commission to identify the user account through which the information was accessed. Accordingly, relevant personnel have been questioned, and all units connected with the incident are cooperating fully with the investigation.

The Commission is also examining all technical, administrative and operational factors associated with the matter in order to establish individual responsibility and determine the circumstances surrounding the use of those credentials and identify any breach of internal access-control protocols before taking appropriate action against anyone involved.

Preliminary findings from the Commission’s audit trail so far, however, indicate that there was no external breach of the CVR database, no hacking incident, and no unauthorised external access to the Commission’s ICT infrastructure. Rather, the information in question was accessed through valid user credentials assigned to personnel participating in the ongoing CVR exercise but released without authority.

The incident under investigation relates to the retrieval of a specific voter record and does not indicate any compromise of the Commission’s broader voter registration infrastructure or the personal data of over 90 million registered voters.

The Commission wishes to state categorically that it takes the security, confidentiality and integrity of voter data with the utmost seriousness and remains committed to transparency, institutional integrity, and the protection of voters’ personal information.

Furthermore, the Department of State Services (DSS), on its own accord, has commenced an independent investigation into the matter. The Commission will continue to cooperate fully with all relevant security agencies and will not hesitate to refer any person found culpable for appropriate legal action.

Members of the public and the media are therefore urged to disregard unfounded speculations while investigations remain ongoing. The Commission will continue to keep the public informed of its final findings and any measures taken in response to the incident in due course.

Mohammed Kudu Haruna National Commissioner and Chairman, Information and Voter Education Committee (IVEC)
2nd June, 2026