Situation overview
Kidnapping in Nigeria, reconstructed from the media record and updated live from monitored news sources. This is a single analytical surface for police, security and intelligence analysts, criminologists and researchers.
Reported incidents monthly · all
Perpetrator type where identified
Top states by detected location
Live feed Sources · newest
Live feed
Newly ingested incidents from monitored news sources. Machine-extracted rows are marked ◔ unverified until an editor confirms them in the CMS — important when the data informs operational decisions.
| Ingested | Date | State | Location | Region | Perpetrator | Type | Victims | Ransom | Outcome | Interview | Status | Source |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Loading… | ||||||||||||
Geography
Where reported kidnappings concentrate. Colour intensity is the count of reports naming each state. North/South is population- and coverage-dependent; read alongside the tempo and coverage notes.
State intensity reports · choropleth
State ranking North · South
State bubble reports × %death · size = reports
Infrastructure overlay incidents × police proximity
Reported incidents plotted against police divisional presence (OSM/LGA-level, indicative). Points are placed at state level with spread, so read the state-level proximity figures below as the reliable signal, not individual point positions.
Most remote states median km to police
Police layer: OpenStreetMap / LGA divisional proxy (indicative, denser than the official GRID3 set which is incomplete). Official GRID3 police points belong in the methodology addendum. Proximity is state-aggregated; incident-level distances are indicative only.
Regional split detected zone
Location type where stated
Tempo
Reporting volume at your chosen resolution — from daily pulse to yearly trend. Peaks track major mass-abduction episodes and intensified coverage; troughs can reflect scraping gaps as much as real decline. Read as a sensor of the media signal, not a count of true events.
Reported incidents monthly · all
Behaviour
Behaviours derived inductively from what reports describe. Lethal violence, not ransom, is the most frequently reported outcome.
Behaviour prevalence % of reports
By region North vs South
Anatomy of an incident
How reported kidnappings resolve, and how ransom relates to survival. This is where the expanded corpus earns its keep: we can compare ransom against non-ransom cases, and death against release, rather than assuming a single script.
Outcomes share of reports
Ransom funnel demand → payment → release
Ransom vs outcome co-occurrence in reports
Comparing the ransom and non-ransom pathways directly: this is only possible because the corpus now captures all kidnap events, not only those mentioning ransom.
Incident chronology hierarchical · hover
Behaviours grouped by phase of the incident, sized by frequency. Hover a segment for counts.
Incident type enriched typology
A fuller classification than the binary flags: fatal abductions and rescues are separated from the general kidnapping and ransom cases. New live incidents are typed directly by the pipeline; the historical corpus is typed from its recorded outcomes.
People
The human scale of reported incidents. Victim counts appear in a minority of reports; where stated, they range from single abductions to mass school and community seizures.
Incident scale victims per event
Note
Mass-abduction events — schools, communities, highways — dominate the total victim count even though they are a minority of incidents. A single event can involve hundreds of people. Sexual violence is explicitly reported in — of cases, an almost certain undercount given reporting norms.
Perpetrators
Perpetrator attribution from report language. Many reports name only "gunmen"; attribution below covers the subset where a group type is stated.
Perpetrator type count
Note
"Bandit" dominates the identified set, concentrated in the North-West. "Unknown gunmen" remains the largest bucket overall — a reminder that attribution in media reporting is incomplete and should not be read as a full order of battle.
Ransom economy
Ransom is demanded in a minority of reports and paid in fewer still. Where both are recorded, families typically pay well below the opening demand.
The demand–payment gap
The median opening demand (₦0) sits well above the median recorded payment (₦0) — a ratio consistent with heavy downward negotiation. Both figures cover only reports that state an amount, which is a minority; treat them as indicative of the reported cases, not the whole.
Coverage
This is a picture of the media record, not ground truth. Which outlets report, and how North and South are covered over time, shapes every other figure on this site. The reviewer's question — is the regional pattern real incidence or coverage bias? — lives here.
Reporting outlets article count
North vs South coverage over time reports/year
Interpretation
A handful of national outlets (Punch, Vanguard, Daily Trust) dominate the corpus. Northern incidents outnumber Southern in the record, but this reflects both real concentration in the North-West and the editorial priorities of these outlets. Read the geography and tempo layers against this caveat.
Explore data
The raw structured records behind the analytics, most recent first. Filter by state, region, perpetrator or outcome to interrogate the underlying data directly.
| Date | State | Region | Type | Perpetrator | Location | Victims | Ransom | Outcome | Interview | Source |
|---|
Strategic assessment
Strategic assessment — key judgement
Lethal violence, not ransom, dominates the reported record. Killing appears in roughly a third of reports and release in a comparable share, while an explicit ransom demand appears in about one in six. Any framing that treats Nigerian kidnapping primarily as a ransom economy understates the lethal dimension that the media record actually describes.
The phenomenon is geographically concentrated but not confined. The North-West (Kaduna, Katsina, Zamfara) and the North-East (Borno) carry the heaviest reported burden, and these are also the areas of sparsest security presence. The South is not absent: it accounts for a substantial minority of reports, with a different profile weighted toward shorter, ransom-oriented abductions.
These figures are media-reported prevalence, not a census of true incidence. They describe what Nigerian news outlets reported, shaped by where journalists are present and which cases they judge newsworthy. High-profile mass abductions are over-represented; low-profile rural incidents are almost certainly under-counted. Read every figure on this site with that caveat, and cross-validate against ground-truth sources where decisions depend on it.
Behaviour sequence analysis
Behaviour Sequence Analysis — summary
Behaviour Sequence Analysis (BSA) treats each kidnapping as an ordered chain of observable behaviours and asks which transitions occur more often than chance. The transition matrix underlying this analysis is drawn from a human-coded corpus of incidents, not from the raw media stream: journalism reports outcomes first (the inverted pyramid), so sequences read directly from article text would invert the real order of events. The validated matrix preserves the true progression.
Two resolution pathways dominate. The stronger is lethal, running from the initial seizure and movement of the victim, through captivity, to the killing of the victim. The second is economic, running from a ransom demand, through negotiation and payment, to release. Ransom is a coherent and internally consistent pathway, but it is not the organising logic of the phenomenon: across the full corpus an explicit ransom demand appears in a minority of reports, while a death appears in roughly a third.
This is the central analytical point the expanded corpus makes possible. Because the collection captures all kidnap events rather than only those mentioning ransom, the ransom and non-ransom pathways can be compared directly. The largest single category is not ransom-and-release but abduction that ends in death without any ransom recorded. Kidnapping in Nigeria is best read as a violent crime within which a ransom market operates, rather than a ransom market that occasionally turns violent.
State transition diagram canonical event ordering
Lag-one behaviour transitions. Grey nodes are kidnapper behaviours, white are victim or police. Arrow weight follows the standardised residual (see key). Two sources: the human-coded 23-node corpus (event-ordered, from the manuscript), and a version computed directly from the extracted + live data. Both use canonical stage-ordering so the sequence reads forward correctly rather than in journalism order (which would produce impossible transitions like killed then abducted). The live version updates as the pipeline ingests incidents; it is necessarily coarser (7 detectable behaviours) than the coded corpus.
Data & methods
Sources
Historical corpus: 0 kidnapping-relevant articles filtered from 0 scraped. Live layer: continuous global news-media monitoring. Geography: GeoBoundaries/GRID3 ADM1 (CC BY 4.0).
Method
Behaviours are extracted inductively from full text. Live-ingested rows are flagged for human review before they count as verified. All figures are media-reported prevalence, not a census.
Data & methods
Source. The corpus is built from scraped Nigerian news coverage, filtered to kidnapping-relevant reports and updated continuously from monitored global news indexes. Collection keys on kidnapping, abduction and hijacking terms — not ransom — so ransom is one observed outcome among several rather than a selection criterion. Each record is a media report, not a verified incident; the same event may be reported more than once.
Extraction. State, perpetrator type, location type, outcome flags (killed, released, rescued), and ransom signals are extracted by pattern matching against the report text. Enriched fields — incident date parsed from relative phrasing, specific location, perpetrator status, and state response — are extracted where the text supports them and left blank otherwise. Items that cannot be supported from the text are recorded as absent rather than inferred.
Live layer and review. New reports are ingested automatically and flagged for human review before they are treated as confirmed. An editor verifies or corrects each machine-extracted record in the content-management system. Victim names are held only in the review system and never appear on any public surface, in keeping with the child-safety and privacy commitments of the project.
Three caveats specific to this data. Mediated voice: where a victim or perpetrator is quoted, the quotation reaches the record through journalists, officials or handlers, and should not be read as unmediated testimony. Propaganda versus data: statements issued by armed groups are strategic communication, not neutral event data, and are treated as such. Silent-majority bias: the record over-indexes on high-profile cases and under-counts rural, low-visibility incidents where no journalist was present. These limits are structural and are stated here so that users weigh the figures accordingly.
Geography. State boundaries use geoBoundaries ADM1 (CC BY 4.0). Incident points are placed at state level with deterministic spread; individual point positions are indicative, and state-aggregated figures are the reliable spatial signal. The police-proximity overlay uses an OpenStreetMap / LGA divisional proxy and is indicative rather than authoritative.
How it works live news → decision-ready evidence
A four-stage collection system turns unstructured newspaper reporting into a structured, geocoded, context-rich record, continuously.
Stage 1 · Discovery
GDELT and RSS feeds surface articles from Nigerian newspaper domains, filtered to kidnapping keywords.
Stage 2 · Scraping
Article body text is extracted and cleaned; stubs and paywalls are filtered out.
Stage 3 · Extraction
Reports are typed and structured into incident and victim fields, each with a confidence flag.
Stage 4 · Analysis
Fields are normalised, articles are linked into events, and the standardised dataset is exported.
One method, auditable. Discovery and scraping run continuously into a live store; a portable, dependency-light pipeline reproduces the extraction and analysis on a spreadsheet of article text, so the method can be audited and rerun without the full infrastructure. Spatial context — police, roads, settlements and LGA vulnerability — is joined from GRID3 Nigeria and OpenStreetMap.
SOURCES: NEWS MEDIA MONITORING · GEOBOUNDARIES ADM1 · DATA CC BY 4.0 · LIVE INGEST ACTIVE