Zenith Bank confirms cyberattack, says customers’ contact information was accessed

Zenith Bank confirms cyberattack, says customers’ contact information was accessed

Zenith Bank has confirmed that hackers gained unauthorised access to limited customer information, including email addresses and phone numbers, following a cyberattack linked to a broader global attack affecting organisations across different sectors.

The bank disclosed the incident in an email sent to customers on Tuesday, assuring them that its banking services and digital channels remain secure and fully operational.

According to the lender, the breach involved only limited customer information, while its core banking infrastructure and digital platforms were not affected.

Zenith Bank said it activated its incident response procedures and other cybersecurity measures immediately after the unauthorised access was discovered.

The bank added that investigations were ongoing to establish the circumstances surrounding the incident, determine its full impact and strengthen measures designed to prevent further security breaches.

“Hackers accessed limited customer information, including email addresses and phone numbers, during a cyberattack that forms part of a broader global attack on organisations across different sectors,” the bank said.

Although Zenith Bank did not disclose the number of customers affected or identify the individuals or group responsible for the attack, it maintained that its banking services remained secure.

The bank also did not indicate whether sensitive financial information, such as account balances, transaction records, passwords, PINs or banking credentials, was accessed.

READ ALSO:

• Adeleke challenges EFCC over freezing of Osun government account
• Nollywood Actress Temitope Osoba Dies at 40 After Courageous Cancer Battle
• BREAKING: 61.54% Pass Rate as WAEC Releases 2026 WASSCE Results – How to Check Results

The development has raised concerns about possible phishing attacks, fraudulent text messages and deceptive phone calls, as cybercriminals may attempt to use customers’ contact information to impersonate the bank or obtain confidential banking details.

Zenith Bank urged customers to remain alert and exercise caution when receiving unexpected emails, text messages or phone calls claiming to originate from the bank.

The lender warned customers not to disclose their passwords, Personal Identification Numbers, One-Time Passwords or other security credentials to anyone.

Customers were also advised to avoid clicking suspicious links, downloading unfamiliar attachments or responding to unsolicited requests for banking information.

The bank said customers should independently verify suspicious communications through its official channels before taking any action.

Zenith Bank has previously warned customers about fraudulent messages and impersonation attempts, stressing that customers should rely only on verified communication channels when seeking banking support. (Zenith Bank Gambia)

The latest Zenith Bank cyberattack has renewed concerns about the growing threat of cybercrime in Nigeria’s financial sector, particularly as more customers depend on mobile banking applications, internet banking and other digital financial services.

In August 2024, Guaranty Trust Bank, now operating under GTCO, reported attempts to compromise its website domain. The bank said at the time that customers’ data had not been affected and that its banking operations remained secure.

The Central Bank of Nigeria (CBN) has also warned Nigerians about fraudulent emails, online messages and other communications falsely presented as official notices from financial institutions and regulatory agencies.

Such messages may contain suspicious links or requests for personal information intended to deceive recipients and gain unauthorised access to their accounts.

Zenith Bank said it remained committed to protecting customers’ information and thanked customers for their continued trust while investigations into the security incident continue.

As of the time of filing this report, the bank had not disclosed the number of customers affected, the source of the cyberattack or whether any financial information was compromised.

Zenith Bank confirms cyberattack, says customers’ contact information was accessed