CAC on Wednesday confirmed that unauthorised access into its database, affected millions of companies..

CAC made this confirmation in a statement on Wednesday through its X account.

Nigeria’s data protection authority has opened an investigation into an alleged data breach at the Corporate Affairs Commission (CAC).

The Nigeria Data Protection Commission (NDPC) said the probe is in line with provisions of the Nigeria Data Protection Act 2023 and pursuant to Section 46(3) of the law.

Babatunde Bamigboye, NDPC’s head of legal, enforcement and regulations, said in a statement issued in Abuja that the move is aimed at strengthening trust in Nigeria’s digital and economic ecosystem.

“This investigation underscores the importance of fostering trust in Nigeria’s economic environment,” he said.

The commission raised concern that threat actors have developed increasingly sophisticated methods to compromise the data security architecture of critical databases, including large-scale data exfiltration and cross-platform breaches across interconnected systems.

NDPC National Commissioner Vincent Olatunji has directed the commission’s technical team to work with relevant authorities and organisations as part of the investigation.

He said the probe would examine access control procedures, data privacy impact assessments, vulnerability testing and due diligence on third-party data processors.

“The NDPC assures the public that data protection frameworks in Nigeria remain fundamentally strong,” Olatunji said.

He added that growing access to data-driven services reflects the resilience of existing systems, while ongoing regulatory actions are necessary to sustain public confidence and support continued investment in the digital economy.