INEC audit trail uncovers user account behind unauthorized voter database access

The Independent National Electoral Commission (INEC) has tracked down the specific user account used to access restricted voter records by running an internal audit trail on registration officers who were granted temporary, controlled database access during the Continuous Voter Registration (CVR) exercise.

The Independent National Electoral Commission (INEC) has launched a comprehensive internal investigation after an automated system audit successfully flagged an insider security breach within its database infrastructure. National Commissioner and Chairman of the Information and Voter Education Committee, Mohammed Haruna, disclosed that preliminary findings from the commission’s digital audit trail have positively identified the specific user account through which restricted information was improperly accessed. The breakthrough allows the electoral umpire to pinpoint accountability following an intensive review of server logs that tracked irregular patterns of data retrieval during recent field operations.

The electoral umpire explained that the administrative vulnerability occurred within the system framework assigned to the ongoing nationwide Continuous Voter Registration (CVR) exercise. To ensure the smooth running of the field operations, authorized registration officers across various local government areas were temporarily granted highly controlled access to specific backend components of the central registration system. This localized administrative window was explicitly designed to enable field agents to process fresh voter registration requests, execute inter-state or intra-state transfer petitions, and perform necessary updates or corrections to existing citizen voter records.

However, the commission strongly reiterated that these administrative privileges are legally ring-fenced and strictly confined to the execution of official, time-bound tasks. According to the commission, such access is strictly limited to official duties and is withdrawn completely once the field exercise concludes, meaning any data extraction beyond the designated operational timeline constitutes a severe violation of service protocols. With the compromised user profile now identified by the technical team, INEC stated that it is implementing tighter data-security protocols to insulate the national voter register from further unauthorized internal exposures before the next election cycle.

READ THE FULL STORY IN PUNCH