April 15, (THEWILL) — Nigeria’s Corporate Affairs Commission (CAC) has confirmed that its digital infrastructure has been hit by a cybersecurity breach involving unauthorised access to parts of its systems.
In a public notice issued on Wednesday, the Commission disclosed that it detected suspicious activity affecting “limited aspects” of its information systems and immediately activated its incident response protocols to contain the breach and prevent further compromise.
The development has placed fresh scrutiny on the security architecture of the Corporate Affairs Commission, which serves as the central repository for company registration records, ownership structures, compliance filings, and other sensitive corporate data widely relied upon by regulators, financial institutions, and the private sector.
According to the Commission, containment measures were swiftly implemented following detection of the intrusion, with additional safeguards now deployed across its digital platforms to reinforce system integrity and restrict unauthorised access points.
The CAC further confirmed that it is working in collaboration with the National Information Technology Development Agency (NITDA) and other relevant cybersecurity stakeholders to carry out a comprehensive forensic investigation to determine the origin, method, and scope of the breach.
Officials said the priority of the ongoing probe is to establish whether any data was accessed, altered, or exfiltrated, stressing that conclusions will only be made after technical analysis is completed.
However, uncertainty continues to surround the incident following unverified online claims alleging that a large volume of data may have been compromised and circulated by a threat actor identified in cyber forums as “BytToBreach”.
The CAC has not confirmed these assertions, nor validated any figures or identities linked to the reported claims.
Cybersecurity analysts caution that early reports emerging from underground or informal online platforms often contain inflated or partially accurate information, warning that only verified forensic findings should be relied upon in assessing the true scale of the incident.
Despite the ambiguity, the breach has intensified concerns over the vulnerability of Nigeria’s expanding digital governance infrastructure, particularly as government agencies increasingly migrate core administrative functions to online platforms.
Experts note that even a limited compromise of CAC systems could expose businesses and individuals to risks such as identity fraud, corporate impersonation, and unauthorised alterations of official records, potentially undermining trust in regulatory processes.
In response, the Commission has advised users of its online portal to take precautionary measures, including regularly monitoring their records, updating login credentials, and exercising caution when responding to unsolicited communications that may exploit the situation.
The CAC, however, maintained that its core services remain fully operational and that the incident has not disrupted access to its platform.
It reaffirmed its commitment to safeguarding the integrity of Nigeria’s corporate registry and strengthening its cybersecurity framework in line with emerging global standards.
The Commission added that further updates will be provided as investigations progress, even as the incident adds to growing calls for stronger cyber resilience across Nigeria’s public sector digital infrastructure.
Felix Ifijeh is a journalist with years of professional reporting experience. Known for his keen news sense, compelling storytelling and commitment to accurate, impactful reporting, he has built a reputation for turning leads into clear, engaging, and well-structured reports that resonate with readers. His work reflects deep newsroom experience and a commitment to accurate, impactful journalism.
