Segun Atanda/
Nigeria’s Corporate Affairs Commission (CAC) has confirmed a cybersecurity breach involving unauthorised access to parts of its information systems, prompting an ongoing investigation and heightened security measures.
In a public notice issued on Tuesday, the Commission disclosed that it had detected a cyber incident affecting “limited aspects” of its systems and had immediately activated response protocols to contain the situation.
It added that it is working closely with the National Information Technology Development Agency (NITDA), alongside other government agencies and partners, to assess the scope and impact of the breach.
“Appropriate containment measures have been implemented, and additional safeguards are in place,” the CAC said, while assuring stakeholders of its commitment to protecting the integrity of Nigeria’s corporate registry.
The Commission advised users to monitor their records on the CAC portal, update login credentials, and remain cautious of unsolicited communications as investigations continue.
The development comes amid circulating claims on social media alleging a large-scale data breach linked to a threat actor identified as “BytToBreach,” which purportedly involved the exfiltration of millions of documents.
The claims suggest that up to 25 million records may have been accessed, with a portion of the data allegedly released online.
However, the CAC has not independently verified these figures or the identity of the alleged attackers.
Officials have also not confirmed the extent of any data exposure beyond the “limited aspects” referenced in its statement.
Cybersecurity analysts note that such claims, often shared on underground forums or social platforms, can be exaggerated or partially accurate, underscoring the need for official verification before drawing conclusions on scale or impact.
This incident adds to a growing list of cybersecurity concerns within Nigeria’s digital infrastructure, raising renewed questions about data protection and institutional resilience.
Recent breaches and allegations involving public and private platforms have intensified calls for stricter enforcement of data protection regulations and improved cyber defence systems.
The CAC said it would provide further updates as investigations progress.
0






