CAC Suspends Registration Portal After Cyberattack Hits Millions of Data Points in Nigeria
Nigeria’s corporate regulatory space has been jolted following a confirmed disruption affecting the digital infrastructure of the Corporate Affairs Commission (CAC), triggering concerns over data security and service access nationwide.
The Corporate Affairs Commission has formally announced a temporary shutdown of its companies’ registration portal after what officials described as a cyberattack incident impacting millions of data points across its database, PulseNets learnt.
The disclosure was made via the Commission’s official communication channel on X (formerly Twitter) on Wednesday, where the agency acknowledged the breach and outlined immediate containment steps, PulseNets reported.
According to details obtained by PulseNets, the portal suspension will run for three days, beginning from April 17 through Monday, April 20, as part of emergency response measures to stabilise the system and prevent further compromise.
Further checks indicate that the CAC is working in close coordination with the National Information Technology Development Agency (NITDA) to mitigate the effects of the cyber intrusion and strengthen its cybersecurity framework, PulseNets learnt.
In a related development, the Nigeria Data Protection Commission (NDPC) has initiated a formal investigation into the data breach, with regulatory scrutiny expected to focus on compliance gaps and data protection protocols, officials told PulseNets.
Providing clarity on the service disruption, the Commission stated:
“To serve you better, we will be carrying out scheduled maintenance on our portal this weekend, from 12:00 midnight today, 17th April 2026, to 6:00 a.m. on Monday, 20th April 2026.
“During this period, the portal may be temporarily unavailable.”
Also Read: POS Operators Can Legally Operate Without CAC Registration — Mobile Money Agents Clarify
The incident underscores growing cybersecurity vulnerabilities within critical government digital systems in Nigeria, raising fresh questions about data resilience, regulatory enforcement, and the urgency of strengthening national cyber defense architecture.
