The Corporate Affairs Commission (CAC), the central hub of Nigeria’s corporate registry, is officially under review following a cybersecurity incident. On April 15, 2026, the commission confirmed that unauthorized bad actors breached limited aspects of its information systems.
While a breach of government infrastructure sounds alarming, understanding what happened and taking immediate, proactive steps can help keep your business information safe.
The Official Response: What the CAC is Doing
The commission has made it clear that they are not taking this lightly. Immediately upon detecting the breach, the CAC activated its emergency response protocols to contain the threat.
To assess the full scope and impact of the attack, the CAC is currently working side-by-side with:
-
The National Information Technology Development Agency (NITDA)
-
Relevant government security and intelligence agencies
-
Private technology partners
According to their public notice, strict containment measures have already been implemented, and additional security safeguards are being implemented to lock down the network.
How to Be Smart About It: Action Required
The CAC has urged all business owners, stakeholders, and registered entities to be proactive while the joint investigation is ongoing. Here is exactly what you should do right now to protect your corporate identity:
-
Update Your Credentials Immediately: Log into the official CAC portal and change your password. Use a strong, unique combination of letters, numbers, and symbols that you do not use on any other website.
-
Audit Your Company Records: Do not assume everything is fine. Manually review your business profiles, recent filings, and submitted documents on the portal to ensure no unauthorized changes have been made.
-
Beware of Phishing Scams: Hackers often use the chaos of a breach to send convincing fake emails. Be extremely cautious of unsolicited communications asking for your data, payment, or login details. Always double-check the sender’s email address and never click suspicious links.
The CAC management has reaffirmed its commitment to the security of Nigeria’s registry and will continue to release updates as the situation develops. Until then, vigilance is your best defense.
