By Epiphanus Obia
The Corporate Affairs Commission (CAC) has confirmed a cybersecurity breach involving unauthorised access to parts of its information systems, raising concerns over the safety of business records stored on its platform.
In a statement issued on Wednesday, the Commission said the incident affected “limited aspects” of its systems and that an investigation is ongoing to determine the scope and impact.
The CAC disclosed that it had activated its incident response protocols immediately after detecting the breach and is working with the National Information Technology Development Agency (NITDA) and other relevant agencies to assess the situation.
According to the Commission, containment measures have already been implemented, with additional safeguards introduced to strengthen system security while the review continues.
The development follows earlier reports suggesting that millions of company records held by the agency may have been exposed, although officials have not confirmed the extent of any data compromise.
While investigations are ongoing, the CAC has advised users of its portal to monitor their records, update login credentials and remain cautious of unsolicited communications that may be linked to the incident.
The breach has raised fresh concerns about the resilience of government digital infrastructure, particularly as the CAC plays a central role in business registration and compliance processes in Nigeria.
Any disruption or exposure of sensitive records could affect companies, legal practitioners and financial institutions that rely on the platform for incorporation, filings and regulatory documentation.
The incident comes amid a series of cybersecurity concerns in Nigeria’s digital ecosystem, including recent investigations by the Nigeria Data Protection Commission into alleged data breaches involving Remita and Sterling bank.
The CAC said it remains committed to protecting the integrity of its database and will provide further updates as the investigation progresses.