CAC Confirms Cyber Breach, Scrambles to Contain Unauthorized Access to Companies’ Data

|By Adejumo Adekunle

The Corporate Affairs Commission (CAC) has confirmed a cybersecurity breach, revealing that unauthorized actors gained access to parts of its database, potentially impacting millions of registered companies across Nigeria.

In a statement released on its official X (formerly Twitter) account on Wednesday, the commission acknowledged the intrusion, describing it as an incident involving “unauthorized access to limited aspects” of its information systems.

The development follows widespread reports alleging that millions of company records housed within the CAC database had been compromised, raising fresh concerns over data security in the country.

Reacting swiftly, the commission said it activated emergency response protocols immediately after detecting the breach, moving to contain the situation and prevent further infiltration.

“CAC promptly activated its response protocols and is working with the National Information Technology Development Agency (NITDA), relevant government agencies, and partners to assess the scope and impact,” the statement noted.

The commission further assured stakeholders that containment measures had already been enforced, while additional safeguards were being deployed to reinforce the integrity of its systems.

Although CAC insists the breach affected only limited components of its infrastructure, the incident has triggered anxiety among business owners and corporate entities who rely on the platform for registration and compliance services.

The breach underscores growing concerns about cybersecurity vulnerabilities in critical national databases, especially as Nigeria’s digital economy continues to expand.

Authorities say investigations are ongoing to determine the full extent of the breach and to ensure accountability.