Zenith Bank confirms cyberattack, limited customer data exposed

Zenith Bank has confirmed that hackers gained unauthorised access to part of its database, exposing limited customer information. The bank says funds and accounts remain safe, and its banking systems have not been compromised.

The disclosure came in an email to customers on Tuesday, part of a coordinated global campaign targeting organisations across multiple sectors. Zenith Bank said the attackers accessed a limited amount of customer information, including email addresses and phone numbers.

What was exposed

According to the bank, there is no evidence that hackers reached customers' accounts, passwords, PINs, One-Time Passwords (OTPs), or funds. The statement reassured customers that mobile and internet banking platforms, ATMs, and digital channels remain secure and fully operational.

Zenith Bank said it immediately activated its incident response protocols and cybersecurity safeguards after detecting the breach. Investigations are ongoing, with security teams working to determine the full scope and strengthen protections against future threats.

Phishing warning

The lender urged customers to stay vigilant against phishing attempts that often follow data breaches. It warned customers to ignore suspicious emails, text messages, and phone calls requesting sensitive banking information.

As reported by TheCabale, Zenith Bank also reminded customers never to disclose passwords, PINs, OTPs, card details, or other security credentials to anyone, regardless of claims that the request comes from the bank. Cybersecurity experts have long warned that stolen contact details are often used for targeted phishing campaigns.

Wider banking sector risks

The incident highlights growing cybersecurity threats to Nigeria's banking sector. In August 2024, Guaranty Trust Bank (GTBank) disclosed that cybercriminals attempted to compromise its website domain, though the bank said no personal or financial data was affected.

Months ago, the Central Bank of Nigeria (CBN) warned Nigerians about an increase in cyber fraud involving fake emails and fraudulent communications falsely claiming to originate from the apex bank. The regulator said scammers circulated misleading messages designed to deceive the public into clicking malicious links or divulging sensitive information.

Data from the CBN's 2025 Annual Report and Statement of Accounts shows the number of Bank Verification Numbers (BVNs) linked to fraudulent activities surged to 13,117 in 2025. Commercial banks, including Access Bank, Zenith Bank, and United Bank for Africa (UBA), significantly expanded fraud monitoring during the year.

For customers, the Zenith Bank breach is a reminder to verify every communication claiming to come from a financial institution and never share confidential banking credentials. The bank has assured depositors that their money and banking operations remain protected while it works with experts to reinforce its cybersecurity defences.