The Corporate Affairs Commission (CAC) of Nigeria has confirmed a cybersecurity breach affecting its database, which contains records of millions of registered companies. The incident, involving unauthorized access to limited aspects of the commission’s information systems, was disclosed in a statement released via the CAC’s official X account on Wednesday.
According to the commission, the breach was detected promptly, and immediate response protocols were activated. The CAC is collaborating with the National Information Technology Development Agency (NITDA), other relevant government agencies, and partners to assess the scope and impact of the incident. Containment measures have been implemented, and additional safeguards have been deployed to strengthen system security.
The breach comes amid growing concerns over the vulnerability of government databases in Nigeria. In recent years, several public and private sector institutions have reported cyberattacks, raising questions about the robustness of the country’s cybersecurity infrastructure. The CAC, as the official registry of companies in Nigeria, holds sensitive information on millions of businesses, making it a high-value target for cybercriminals.
While the commission has not provided specific details on the nature or extent of the data accessed, it has assured stakeholders that efforts are underway to secure the systems and prevent further unauthorized access. The involvement of NITDA and other agencies underscores the seriousness with which the Nigerian government is treating the incident.
Cybersecurity experts have called for increased investment in digital infrastructure and the adoption of advanced security protocols to protect critical data. The CAC’s swift response and transparency in addressing the breach are seen as positive steps, but concerns remain about the potential misuse of compromised information.
As investigations continue, the CAC has urged registered companies and stakeholders to remain vigilant and report any suspicious activity related to their records. The commission has also promised to provide updates as more information becomes available.
This incident highlights the ongoing challenges faced by governments and organizations worldwide in safeguarding digital assets against increasingly sophisticated cyber threats. For Nigeria, ensuring the security of its corporate registry is crucial not only for protecting businesses but also for maintaining public trust in its digital governance systems.
