Zenith Bank has confirmed that its database was hit by hackers, leading to unauthorised access to limited customer information, including email addresses and phone numbers.
The bank disclosed the incident in an email sent to customers on Tuesday, explaining that the breach formed part of a broader global cyberattack targeting organisations across different sectors.
According to Zenith Bank, only limited customer information was accessed, while its banking services and digital channels remain secure and fully operational.
The bank said it immediately activated its incident response protocols and other cybersecurity measures after discovering the breach, adding that investigations into the incident are ongoing.
“As a precaution, we encourage our customers to remain vigilant against phishing emails, text messages, or phone calls, and to never disclose their password, PIN, One-Time Password (OTP), or other security credentials to anyone,” the bank warned.
Zenith Bank said it remains committed to protecting customers’ information and thanked customers for their continued trust.
The latest incident comes amid growing concerns over cyber threats targeting financial institutions and customers in Nigeria.
In August 2024, Guaranty Trust Bank reported a similar incident, saying there were attempts to compromise its website domain, although it maintained that customers’ data was not affected.
The cyberattack also comes months after the Central Bank of Nigeria warned the public about hacking attempts aimed at gaining access to personal accounts of Nigerians.
The CBN had said fraudsters were circulating fake messages and emails falsely claiming to originate from the apex bank.
According to the regulator, the misleading communications were designed to deceive members of the public and compromise their personal information. The fake messages often asked recipients to click suspicious links while spreading false claims about the CBN’s leadership, licensing activities and policy decisions.
Zenith Bank has urged customers to remain cautious and avoid sharing sensitive banking details with anyone, particularly passwords, PINs, OTPs and other security credentials.