Oyo State government ID cards and certificates offered on DarkForums

Overview

On 1 July 2025, a DarkForums user offered ID cards and certificates linked to the official commerce portal of Oyo State, Nigeria, which hosts commercial information about state traders, cooperatives and commerce activities. The post references the domain oyostate.gov.ng and describes the material as a locked ID card and certificate dataset.

What was published

The poster listed two identifiers, an ID card entry and a certificate entry, and stated that the full release would follow as open source. The announced volume is roughly 2.1 GB. The exact number of records and the identity of the individuals affected were not disclosed in the thread.

Risks for affected individuals

• Nigerian government-issued documents, including ID cards and certificates, can be used for identity fraud or forgery if the underlying records match real citizens.
• The data may feed phishing campaigns targeting civil servants, traders or residents registered on the state portal.

What remains unknown

• Whether the full 2.1 GB dataset was actually released or still gated behind the poster's schedule.
• Which categories of ID cards and certificates are included, and how many individuals are affected.
• Whether the source is a compromise of the state platform or a third-party database.

What affected people should do

Residents of Oyo State who used the commerce portal should watch for unsolicited messages asking for credentials or payments. Government agencies should verify whether the exposed documents are authentic and notify affected citizens through official channels.