ABUJA — The Corporate Affairs Commission (CAC) has officially confirmed a security breach involving its digital infrastructure, marking a significant challenge for Nigeria’s primary corporate registry. In a statement released on April 15, 2026, the Commission disclosed that unauthorized persons gained access to “limited aspects” of its information systems, prompting an immediate investigation into the depth of the intrusion.

The CAC, led by Registrar-General Hussaini Ishaq Magaji, has responded by activating emergency security protocols and initiating a comprehensive forensic audit of its digital environment. To ensure a thorough technical response, the Commission is collaborating with the National Information Technology Development Agency (NITDA) to determine the full scope of the breach and identify any specific corporate data that may have been compromised.

In a direct advisory to the public, the Commission has urged all registered entities and users of its online portal to update their login credentials immediately. Business owners have also been advised to maintain a high level of vigilance and closely monitor their corporate records for any unauthorized changes or suspicious activity.

While the CAC has intensified its monitoring systems to prevent further unauthorized access, the incident underscores the growing cybersecurity threats facing critical national databases. The Commission’s primary focus remains on restoring full confidence in its digital systems, which serve as the backbone for company incorporations and statutory filings across Nigeria. No specific group has yet been identified as responsible for the attack, and investigations remain ongoing.