CAC Cyberattack Triggers Investigation as NITDA Steps In.

Nigeria’s Corporate Affairs Commission (CAC) has confirmed a cybersecurity incident involving unauthorised access to parts of its systems, prompting an immediate investigation with support from National Information Technology Development Agency (NITDA). The breach, disclosed this week, has triggered containment measures and forced the agency to advise users to update login credentials while forensic analysis continues.

The incident is particularly sensitive because CAC manages Nigeria’s corporate registry, including company registrations, business names, and director records. While officials say the intrusion affected “limited aspects” of its infrastructure, the full scope remains under review—raising concerns about potential exposure of corporate data and the integrity of one of Nigeria’s most critical government databases.

Beyond the immediate impact, the breach reflects a deeper vulnerability across Africa’s digital systems. As governments digitise public services and centralise large datasets, they are becoming high-value targets for cyberattacks. From fintech platforms to identity systems, the continent’s digital expansion is accelerating—but cybersecurity capacity is not scaling at the same pace.

This gap is driven by several factors: underinvestment in cybersecurity infrastructure, fragmented systems across agencies, and heavy reliance on human processes that are vulnerable to phishing and credential compromise. In many cases, security is still treated as a secondary layer rather than a foundational component of digital systems—creating weak points that attackers exploit.

Conclusion

The CAC incident underscores a critical reality: Africa’s digital future depends as much on security as it does on innovation. Strengthening cyber resilience will require coordinated investment in infrastructure, talent, and enforcement, alongside stronger collaboration between public institutions and regulators. Without that, every step toward digitisation risks being matched by an equally growing exposure to cyber threats.