CAC Experiences Data Breach, Users Advised To Reset Login Credentials

The Corporate Affairs Commission (CAC) is currently investigating a cybersecurity incident involving unauthorized access to parts of its computer systems, according to a known source. Even though the incident’s entire scope is still being determined, sources indicate that millions of registered Nigerian firms may be impacted.

The commission said in a statement on Wednesday that the incident affected “limited aspects” of its systems.

According to the statement, “the Corporate Affairs Commission (CAC) is currently reviewing a cybersecurity incident involving unauthorized access to limited aspects of its information systems.”

The commission stated that as soon as it became aware of the situation, it triggered its reaction procedures.

The CAC has activated a coordinated response with NITDA and other partners, implemented containment measures, and remains committed to registry security amid rising cyber threats, promising further updates as its investigation progresses.

CAC claims that suitable containment measures are in place, along with further security steps to bolster system security.

The commission urged visitors to its platform to exercise caution while the review continues.

Stakeholders are encouraged to monitor their CAC portal records, update their login information, and be cautious of unsolicited communications.

The commission reaffirmed its dedication to safeguarding the accuracy of its database.

Additionally, CAC stated that as investigations advance, it will offer updates.

The Nigeria Data Protection Commission (NDPC) began looking into a purported data breach involving Sterling Bank, Remita Payment Services Ltd., and other organizations on April 5.

CAC advises that all stakeholders and portal users should immediately update their CAC login credentials, monitor business records for unauthorized changes, and stay vigilant against phishing scams.

Also, the CAC has pledged to proffer more updates as the inquiry moves along, and it is still dedicated to preserving the security of Nigeria’s corporate registrations.