The Corporate Affairs Commission has confirmed a cybersecurity breach involving unauthorised access to parts of its digital systems.
The incident, disclosed on Wednesday, is under investigation, with the commission assuring users that the breach remains limited in scope.
“The Corporate Affairs Commission is currently reviewing a cybersecurity incident involving unauthorised access to limited aspects of its information systems,” the statement reads.
The agency said it detected the breach early and triggered internal response systems to contain potential damage.
“CAC promptly activated its response protocols,” the commission stated.
“We are working with the National Information Technology Development Agency and other partners to assess the scope and impact,” it added.
The CAC oversees business registration and corporate data management across Nigeria, making its systems critical to economic activity.
Consequently, any breach, even limited, carries implications for business records and investor confidence.
Containment Measures And System Reinforcement
The commission said immediate steps were taken to prevent escalation after detecting the intrusion.
“Containment measures have been implemented,” the statement said.
It added that additional layers of security have now been deployed across its infrastructure.
“We are reinforcing our systems against further vulnerabilities,” the agency said.
Meanwhile, CAC described the incident as a test of its existing safeguards and resilience frameworks.
The agency maintained that its response systems functioned as designed during the breach.
“This reflects the effectiveness of our internal response mechanisms,” the statement indicated.
However, the full technical details of the breach remain under review as investigations continue.
Users Advised To Strengthen Security
The commission issued a public advisory to users of its online portal following the incident.
“Stakeholders are advised to monitor their records on the CAC portal,” it said.
“Update login credentials, and remain cautious of unsolicited communications,” the agency added.
These measures aim to prevent secondary risks such as phishing attacks or unauthorised account access.
Furthermore, CAC assured users that it remains committed to transparency as findings emerge.
“We will continue to keep the public informed,” the commission said.
For additional reporting, see coverage by NITDA and partner agencies.
The incident comes amid rising cybersecurity threats targeting public institutions and digital services in Nigeria.
As reliance on online platforms grows, agencies face increasing pressure to secure sensitive data systems.
Rate, Like 👍, Comment 💬, Share this article, Follow us on our social media handles, and Submit your own story to get featured and earn rewards!




