Nigerian CAC: 25 million corporate documents claimed stolen

Overview

On April 14, 2026, GOD-ranked DarkForums user ByteToBreach claimed the compromise of the Nigerian Corporate Affairs Commission (CAC), the national company registry. The post states that around 25 million documents were downloaded from CAC infrastructure, with over 15 million described as substantive documents beyond simple corporate signatures, and offers 750 GB for free download.

What was published

The post includes seven proof screenshots described as showing initial access, escalation, takeover, portals, full access and exfiltration, and provides multiple download locations:

• A main data share of 750 GB
• Google Drive, Sync.com and OneDrive backups

The remaining data is offered for sale.

Risks for affected individuals

Nigerian company directors and shareholders could have their corporate records, signatures and registration documents exposed. Corporate signatures and registration data can be used in fraud, including unauthorized company filings and identity-based financial crime.

What remains unknown

• The CAC has not publicly commented
• The download links could not be verified at capture time
• The claimed volume of 25 million documents is not independently confirmed

What affected people should do

Nigerian business owners should monitor the CAC registry for unauthorized changes to their company records and report any suspicious filings. Being cautious of documents or requests referencing company registration details is recommended.