Avocats Sans Frontières France has expressed concern over a recent data breach at the Corporate Affairs Commission, warning that the incident could undermine the privacy rights of Nigerian entrepreneurs.

The organisation, also known as Lawyers Without Borders, made its position known in a statement issued on Tuesday, and signed by its Country Director, Angela Uwandu Uzoma-Iwuchukwu, a copy made available to our correspondent in Enugu.

The group’s reaction follows an earlier disclosure by the CAC, which, in a public notice dated April 15, confirmed that it was reviewing a cybersecurity incident involving unauthorised access to parts of its information systems.

“The Corporate Affairs Commission is currently reviewing a cybersecurity incident involving unauthorised access to limited aspects of its information systems,” the commission stated, adding that it had activated response protocols and was working with the National Information Technology Development Agency and other stakeholders to assess the scope of the breach.

The CAC noted that containment measures had been implemented and additional safeguards put in place to protect its systems.

However, ASF France alleged that the breach, reportedly linked to a threat actor identified as “ByteToBreach,” led to the compromise of sensitive personal data, including handwritten signatures, national identity documents and passport photographs.

The organisation described the incident as a violation of the constitutional right to privacy and a breach of obligations under the Nigeria Data Protection Act 2023.

It faulted the CAC’s handling of the situation, citing inadequate disclosure and lack of clarity in its public communication.

According to ASF France, the failure to disclose the number of affected individuals has left many Nigerians uncertain about the extent of the breach. It also criticised the characterisation of system disruptions as “scheduled maintenance,” saying such communication could erode public trust.

The group further stated that the CAC had not fully complied with provisions of the data protection law requiring direct notification of affected individuals in high-risk breaches.

ASF France also raised concerns over the absence of clear mechanisms for victims to seek redress or protect their identities, including measures for flagging or reissuing National Identification Numbers and passports.

While acknowledging the involvement of the Nigeria Data Protection Commission and NITDA, the organisation urged authorities to adopt more proactive measures.

It warned that reports of a cascading failure involving third-party payment systems and the banking sector pointed to deeper vulnerabilities in the commission’s digital infrastructure.

The group called for an independent forensic audit of the CAC’s cybersecurity framework, stronger regulatory enforcement, and the introduction of identity protection measures for affected persons.

It also urged the Federal Government to adopt data minimisation practices and establish a framework to protect victims from identity theft.

In addition, ASF France called on the National Assembly to summon CAC officials to provide explanations and outline steps to strengthen cybersecurity measures, including regular vulnerability assessments.

“The personal data of Nigerian citizens is a sacred trust,” the statement added, stressing the need for improved accountability and transparency in data protection.

Follow Our WhatsApp Channel _______________________________________________________________________

[A MUST HAVE] Evidence Act Demystified With Recent And Contemporary Cases And Materials

“Evidence Act: Complete Annotation” by renowned legal experts Sanni & Etti.

Available now for NGN 40,000 at ASC Publications, 10, Boyle Street, Onikan, Lagos. Beside High Court, TBS. Email publications@ayindesanni.com or WhatsApp +2347056667384. Purchase Link: https://paystack.com/buy/evidence-act-complete-annotation

______________________________________________________________________ ARTIFICIAL INTELLIGENCE FOR LAWYERS: A COMPREHENSIVE GUIDE Reimagine your practice with the power of AI “...this is the only Nigerian book I know of on the topic.” — Ohio Books Ltd Authored by Ben Ijeoma Adigwe, Esq., ACIArb (UK), LL.M, Dip. in Artificial Intelligence, Director, Delta State Ministry of Justice, Asaba, Nigeria. Bonus: Get a FREE eBook titled “How to Use the AI in Legalpedia and Law Pavilion” with every purchase.

How to Order: 📞 Call, Text, or WhatsApp: 08034917063 | 07055285878 📧 Email: benadigwe1@gmail.com 🌐 Website: www.benadigwe.com

Ebook Version: Access directly online at: https://selar.com/prv626

______________________________________________________________________ “Bridging Theory And Courtroom Practice” — Hagler Sunny Okorie, Nathaniel Ngozi Ikeocha Unveil ‘Functional’ Tort Law Book For Nigerian Legal System The book, titled The Law of Torts in Nigeria: A Functional Approach, authored by Professor Hagler Sunny Okorie Ph.D and Ikeocha, Nathaniel Ngozi Esq, offers law students, practitioners, and academics a comprehensive guide to understanding and applying tort law in Nigerian courts. Interested buyers can place orders via the following contact numbers: 08028636615, 08037667945, 08032253813, or +234 902 196 2209. ______________________________________________________________________ “Enhance Legal Practice With Authoritative Reports” — Alexander Payne Offers Comprehensive Law Reports, Spanning Over A Century Of Nigerian Jurisprudence

Interested buyers are encouraged to place their orders and enquiries via: 0704 444 4777, 0704 444 4999, 0818 199 9888 Website: www.alexandernigeria.com