Hackers have breached the database of Zenith Bank, one of Nigeria’s largest financial institutions, compromising limited customer information in what the lender described as part of a wider global cyberattack.
The bank confirmed the incident in an email sent to customers on Tuesday, saying the attackers gained access to limited customer information, including email addresses and phone numbers.
According to Zenith Bank, the breach forms part of a broader cyberattack targeting organisations across multiple sectors globally.
The bank, however, assured customers that its banking services and digital channels remain secure and fully operational, stressing that no disruption has been recorded.
Zenith Bank said its incident response protocols and cybersecurity measures were immediately activated after the breach was detected, adding that investigations into the incident are ongoing.
“As a precaution, we encourage our customers to remain vigilant against phishing emails, text messages, or phone calls, and to never disclose their password, PIN, One-Time Password (OTP), or other security credentials to anyone,” the bank said.
The lender reiterated its commitment to safeguarding customers’ information and thanked customers for their continued trust while the investigation continues.
The incident follows a similar cyberattack reported by Guaranty Trust Bank (GTB) in August 2024. At the time, GTB disclosed that there were attempts to compromise its website domain but maintained that customers’ data was not affected.
The latest breach also comes months after the Central Bank of Nigeria (CBN) warned Nigerians about cybercriminals circulating fraudulent emails and messages falsely claiming to originate from the apex bank.
According to the CBN, the fake communications were designed to trick recipients into clicking malicious links and disclosing sensitive personal information while spreading false claims about the bank’s leadership, licensing activities and policy decisions.
