The Belize Companies and Corporate Affairs Registry (BCCAR) identified unauthorized access to documents held in the Online Business Registry System (OBRS) on 4 August 2026, during routine system maintenance. At 1:45 p.m. on 5 August 2026, BCCAR took OBRS offline to stop further unauthorized access and issued a service disruption notice at the same time.
The investigation to date has found no evidence that the underlying OBRS platform, core registry database, servers, or administrative accounts were compromised. There is also no evidence that official registry records were amended, deleted, or otherwise altered. BCCAR therefore has a high degree of confidence in the integrity of the core registry data.
The incident involved unauthorized access to application documents available through OBRS information services. Some of these documents may contain non-public information and may have been viewed or downloaded. BCCAR is verifying the full scope and will communicate directly with Registered Agents and affected business owners, where applicable. Credit card data is not stored in OBRS and was therefore not affected by the incident.
All identified suspect accounts have been disabled, relevant records have been preserved, and an external cybersecurity specialist is assisting with the investigation and independent validation. Corrective work and broader security checks are underway. BCCAR is targeting restoration of the online service on Monday, 10 August 2026, subject to completion of the corrective work, independent security testing and final clearance.
Important security reminder: Businesses and users should remain alert to suspicious emails, calls or messages referring to BCCAR, OBRS or information submitted through the Registry. Do not provide passwords, financial information, or identity documents in response to an unsolicited request.
BCCAR will continue to publish verified updates at https://bccar.bz/bccar-cybersecurity-incident-update/ and will provide direct notifications where appropriate.
BCCAR regrets the concern and disruption caused by this incident and remains committed to responding with urgency.
BCCAR’s immediate priorities are to complete the exposure assessment, provide accurate information and support to affected parties, restore the service safely by the target date of 10 August 2026, and implement safeguards to reduce the risk of recurrence.
Contact BCCAR
Hotline: +501-223-4701
WhatsApp: +501-615-8761
Email: inquiries@bccar.bz
Dedicated information page: https://bccar.bz/bccar-cybersecurity-incident-update/
