Online Business Registry Restored After Cybersecurity Breach

The Belize Companies and Corporate Affairs Registry has restored access to its Online Business Registry System, six days after taking the platform offline because of a cybersecurity incident. The system became available again at eight o’clock this morning following security assessments, recovery work and additional testing.  BCCAR says the incident was detected on August 4, prompting the agency to temporarily disable the online registry while it investigated the unauthorized access and introduced further safeguards.  The investigation has confirmed that some documents were downloaded during the breach. Those documents have now been marked with a solid warning icon under the “Attachments” section of the relevant application or register record, allowing affected users to identify them.

BCCAR stresses that there is no evidence that any of the marked documents was altered or deleted. The warning also does not affect the validity of a document. Users who find a marked attachment in their accounts are being advised to review BCCAR’s online cybersecurity update and frequently asked questions for guidance.  The Registry says its initial investigation identified passport-based registration for limited public-user accounts as a vulnerability that was exploited to gain unauthorized access. That registration option has therefore been temporarily disabled.  BCCAR has also imposed a temporary limit of one hundred document views or downloads per user per hour. The measures will remain under review and may be adjusted.  While the online platform has been restored, BCCAR says the investigation is not over and additional verified information will be released as it becomes available. Customers with concerns may contact the Registry through its hotline at 223-4701, WhatsApp at 615-8761 or by email at inquiries@bccar.bz