“Stakeholders are advised to monitor their records on the CAC portal, update login credentials, and remain cautious of unsolicited communications,” said the Corporate Affairs Commission (CAC). This statement comes as the agency reviews a significant cybersecurity incident.
The CAC activated its response protocols immediately after detecting unauthorized access to parts of its information systems. The agency confirmed that millions of data points in Nigeria were affected by this cyberattack.
CAC is collaborating with the National Information Technology Development Agency (NITDA) and other relevant government agencies to assess the scope and impact of the breach. About 25 million documents were allegedly exfiltrated from CAC’s infrastructure, according to Dark Web Informer.
The agency processes up to 10,000 business registration requests daily and handles an average of 5,000 customer inquiries through emails and call centers. However, due to this incident, CAC announced a temporary suspension of its companies’ registration portal from April 17 to April 20, 2026.
To serve users better during this period, CAC stated, “To serve you better, we will be carrying out scheduled maintenance on our portal this weekend, from 12:00 midnight today, 17th April 2026, to 6:00 a.m. on Monday, 20th April 2026.” This maintenance aims to enhance security measures following the attack.
CAC reiterated its commitment to the security and integrity of Nigeria’s corporate registry. It confirmed that appropriate containment measures have been implemented, and additional safeguards are now in place.
Yet, uncertainties remain. The exact nature and extent of the data breach are unclear. Additionally, the identity of the threat actor behind the attack has not been confirmed.