Hackers breach Zenith Bank database

Hackers have breached the database of Zenith Bank, one of Nigeria’s largest financial institutions, gaining access to limited customer information.

The bank confirmed the cyberattack in an email sent to customers on Tuesday, disclosing that the attackers accessed certain personal information, including customers’ email addresses and phone numbers.

According to Zenith Bank, the breach forms part of a wider global cyberattack targeting organisations across multiple sectors.

The bank, however, assured customers that the incident was limited in scope and did not compromise its banking services or digital platforms.

“The attackers accessed limited customer information, including email addresses and phone numbers, during a cyberattack that forms part of a broader global attack on organisations across different sectors,” the bank said.

It added that its banking services and digital channels remain secure and fully operational.

Zenith Bank said it immediately activated its incident response protocols and other cybersecurity measures upon detecting the breach, while investigations into the incident are ongoing.

As a precaution, the bank advised customers to remain vigilant against phishing emails, text messages, and phone calls aimed at exploiting the stolen contact information.

“We encourage our customers to remain vigilant against phishing emails, text messages, or phone calls, and never disclose their password, PIN, One-Time Password (OTP), or other security credentials to anyone,” the bank stated.

The lender reiterated its commitment to safeguarding customers’ information and thanked them for their continued trust while efforts to determine the full extent of the attack continue.

The latest breach comes nearly two years after Guaranty Trust Bank (GTBank) reported an attempted cyberattack in August 2024. At the time, the bank disclosed that hackers had tried to compromise its website domain but maintained that customers’ data remained secure.

The incident also follows repeated warnings by the Central Bank of Nigeria (CBN) over rising cyber threats targeting Nigerians.

The apex bank had cautioned the public about fraudulent emails and messages falsely claiming to originate from the CBN, warning that cybercriminals were using fake communications to trick people into revealing sensitive personal and financial information.

According to the CBN, the fraudulent messages often contain suspicious links and false claims about the bank’s leadership, licensing activities, and policy decisions, with the aim of deceiving recipients and compromising their personal data.