CAC SYSTEMS HACKED. Every Registered Nigerian Business Should Act Now

Every Registered Nigerian Business Should Act Now

Corporate Affairs Commission confirms cyberattack; NITDA investigation ongoing

The Corporate Affairs Commission confirmed Wednesday that its systems were compromised in a cyberattack, potentially exposing data for millions of registered Nigerian businesses.

The CAC said it detected unauthorised access to parts of its information systems and immediately activated response protocols. The agency is working with NITDA and other government partners to determine the scale of the breach.

The commission processes up to 10,000 business registration requests daily, following the deployment of artificial intelligence across its service delivery platforms. It also handles an average of 5,000 customer inquiries daily.

The breach makes CAC the third major Nigerian institution to confirm a cyberattack within two weeks, following reported incidents at Remita Payment Services and Sterling Bank, where threat actor "ByteToBreach" allegedly exposed Bank Verification Numbers and KYC documents.

The CAC's registry holds director names, shareholder details, registered addresses, shareholding structures, and corporate filings, data that could be weaponised for fraud, identity theft, or unauthorised changes to company records.

Officials have urged all users to update their login credentials and monitor their records as a precaution while the investigation continues. Any prolonged downtime or data leak could delay registrations, filings, and compliance checks for thousands of businesses.

"CAC remains committed to the security and integrity of Nigeria's corporate registry," the commission said.