CAC Suspends Portal for 3 days amid Cyber Threat Concerns

The Corporate Affairs Commission has announced a temporary shutdown of its online portal from April 17, 2026, to April 20, 2026, to carry out scheduled maintenance.

This was disclosed in a public notice issued by the Commission on April 17, 2026, where it informed users of planned system upgrades.

The planned maintenance follows reports of a cybersecurity incident affecting parts of its systems.

What they are saying 

The CAC said the maintenance exercise is aimed at improving service delivery and enhancing user experience on its platform.

• “To serve you better, we will be carrying out scheduled maintenance on our portal this weekend, from 12:00 midnight today, 17th April 2026, to 6:00 a.m. on Monday, 20th April 2026. 

During this period, the portal may be temporarily unavailable.

• “We regret any inconvenience this may cause and appreciate your patience and understanding,” they stated. 

Get up to speed 

The scheduled maintenance follows allegations that approximately 25 million documents may have been exfiltrated from the Corporate Affairs Commission’s infrastructure.

The Commission confirmed a cybersecurity incident involving unauthorised access to parts of its systems, prompting concerns over the safety of corporate data.

• In response, the Nigeria Data Protection Commission launched a formal investigation into a reported data breach at the CAC, citing concerns over the safety of sensitive corporate and personal data.
• The NDPC said the probe will examine areas such as access control mechanisms, data privacy impact assessments, vulnerability testing, and third-party data processing practices, as part of efforts to strengthen safeguards around personal data.

The CEO of NDPC, Vincent Olatunji, directed the agency’s technical team to engage relevant authorities and organisations to strengthen existing data protection measures

The National Information Technology Development Agency announced that it has activated coordinated cybersecurity measures with CAC and directed all government agencies to review their security architecture, fix vulnerabilities, and strengthen monitoring and incident response systems.

What you should know 

The Commission last year digitised its operations to improve service delivery. In July 2025, it launched an AI-powered portal that enables faster approvals and can issue registration certificates in under 30 minutes after NIN verification, marking a shift from manual, in-office processes to fully digital registration.

• As part of its cleanup efforts, the Commission also removed 247 companies from its database for operating with false Registered Certificate (RC) numbers.
• By February 2026, the Commission disclosed that it processes up to 10,000 business registration requests daily following the deployment of artificial intelligence across its platforms.

According to the Registrar-General, Hussaini Magaji, the system also handles an average of 5,000 customer inquiries daily through emails and call centres.