The Nigeria Data Protection Commission (NDPC) has launched an investigation into a suspected data breach involving the Corporate Affairs Commission (CAC), raising concerns about the security of sensitive government databases.
The development was confirmed in Abuja by Mr Babatunde Bamigboye, Head of Legal, Enforcement and Regulations at the NDPC, who said the probe is being conducted under the Nigeria Data Protection Act 2023.
According to Bamigboye, the investigation is aimed at reinforcing public trust in Nigeria’s digital ecosystem and safeguarding personal data across critical platforms.
He noted that cyber threats are becoming increasingly sophisticated, with malicious actors targeting key databases using advanced techniques.
These include large-scale data extraction and coordinated attacks across interconnected systems, posing risks to data integrity and privacy.
To address the situation, the National Commissioner of NDPC, Dr Vincent Olatunji, has directed the commission’s technical team to collaborate with relevant institutions involved in the matter.
He explained that the investigation will examine multiple aspects of data protection, including access control systems, vulnerability assessments, and compliance with data privacy regulations.
The review will also assess third-party data processors to ensure they meet required standards for handling sensitive information.
Olatunji reassured Nigerians that existing data protection frameworks remain strong despite the reported breach.
He added that ongoing regulatory measures are essential to maintaining confidence in Nigeria’s digital economy and attracting investment.
The NDPC emphasized that strengthening cybersecurity and ensuring compliance with data protection laws remain top priorities as the country expands its digital services.
