Cyber Incident Victim: Nigerian Independent National Electoral Commission
Date:
Mar 2015
Location:
Nigeria
Summary
Nigeria's electoral commission experienced a website compromise by a group identifying as the Nigerian Cyber Army, which defaced the site with a mocking message during voter accreditation activities. The organization temporarily took the platform offline for maintenance, restored functionality shortly afterward, and initiated an investigation while publicly assuring stakeholders of minimal disruption.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On March 28, 2015, during Nigeria’s voter accreditation process, the Independent National Electoral Commission (INEC) website was compromised by a group identifying as the "Nigerian Cyber Army." The attack occurred in the morning hours, coinciding with the start of electoral operations. Hackers defaced the site, replacing its content with a message stating: “Sorry xD Your Site has been STAMPED by Team Nigerian Cyber Army. FEEL SOME SHAME ADMIN!!” This unauthorized alteration rendered INEC’s official web presence inaccessible to the public. The commission promptly acknowledged the breach via its Twitter account, confirming awareness of the incident and initiating an investigation. INEC temporarily replaced the hacked content with a maintenance notice reading: “We will be back soon! Sorry for the inconvenience but we are performing some maintenance at the moment. We will be back online shortly! Site should be back up soon.” This action aimed to mitigate public confusion while technicians addressed the compromise.
INEC engineers successfully restored the website within hours of the defacement. A commission spokesman assured Nigerians through Channels Television that the situation posed no ongoing concerns, emphasizing the swift resolution. The restoration process involved removing all unauthorized content introduced by the attackers and returning the site to its original operational state. No additional technical details regarding the attack vector, data compromise, or voter system impacts were disclosed publicly. The incident occurred during a critical phase of electoral activities but did not disrupt the accreditation process itself, as the website served primarily as an informational portal rather than a voting platform. INEC’s public communications focused on reassuring stakeholders while avoiding elaboration on forensic findings or long-term security adjustments.