Hackers Breach Zenith Bank Database, Access Customers’ Information

Zenith Bank has confirmed that hackers breached parts of its database, gaining access to limited customer information during a cyberattack linked to a broader global campaign targeting organisations across multiple sectors.

The bank disclosed the incident in an email sent to customers on Tuesday, assuring them that its banking operations and digital platforms remain secure and fully functional.

According to the bank, the attackers accessed limited customer information, including email addresses and phone numbers.

Zenith, however, emphasised that sensitive banking information and customer funds were not compromised during the incident.

The financial institution said it activated its incident response protocols immediately after detecting the breach and has continued to strengthen its cybersecurity measures while investigations remain ongoing.

“As a precaution, we encourage our customers to remain vigilant against phishing emails, text messages, or phone calls, and to never disclose their password, PIN, One-Time Password (OTP), or other security credentials to anyone,” the bank said.

Zenith assured customers that safeguarding their information remains a top priority and thanked them for their continued confidence in the institution.

The bank added that it is working to determine the full scope of the incident while taking appropriate measures to prevent future attacks.

The latest breach comes amid increasing concerns over cyber threats targeting Nigeria’s financial sector and follows a similar incident involving Guaranty Trust Bank in August 2024.

At the time, GTB disclosed that its website domain was targeted in a cyberattack but maintained that customer data and banking operations were not affected.

The incident also comes months after the Central Bank of Nigeria warned Nigerians about growing cybercrime attempts involving fraudulent emails, text messages and online communications falsely claiming to originate from the apex bank.

The CBN had cautioned members of the public against clicking suspicious links or responding to messages requesting confidential banking information.

It also warned that fraudsters were circulating misleading communications containing false claims about the bank’s policies, licensing activities and leadership in an attempt to deceive the public and obtain personal information.

With cyberattacks becoming more sophisticated, financial institutions have continued to urge customers to adopt safe digital practices, including verifying official communications, avoiding suspicious links and never sharing confidential banking credentials with anyone.