Zenith Bank Plc has confirmed that it suffered a cyberattack in which hackers gained unauthorised access to limited customer information, including email addresses and phone numbers.
The bank disclosed the incident in a notification sent to customers on Tuesday, assuring them that its banking services and digital channels remain secure and fully operational.
According to the bank, the breach forms part of a broader global cyberattack targeting organisations across multiple sectors.
Zenith Bank said the attackers accessed only limited customer information and that no evidence had emerged to suggest that banking platforms or customers’ funds were compromised.
The lender said it immediately activated its incident response protocols and other cybersecurity measures upon discovering the breach and had commenced investigations into the incident.
“As a precaution, we encourage our customers to remain vigilant against phishing emails, text messages or phone calls, and to never disclose their password, Personal Identification Number (PIN), One-Time Password (OTP) or other security credentials to anyone,” the bank said.
It reaffirmed its commitment to protecting customers’ information and thanked customers for their continued confidence while investigations remain ongoing.
The incident is the latest in a series of cyber threats targeting Nigeria’s financial sector.
In August 2024, Guaranty Trust Bank Plc reported attempts by cybercriminals to compromise its website domain but said the incident did not affect customers’ data.
The latest breach also follows an earlier warning by the Central Bank of Nigeria, which cautioned Nigerians against cybercriminals circulating fraudulent emails and messages falsely claiming to originate from the apex bank.
The CBN had warned that the fake communications were designed to deceive members of the public into revealing sensitive personal information by directing them to malicious links and spreading false claims about the bank’s leadership, licensing activities and policy decisions.
Cybersecurity experts have consistently advised bank customers to adopt stronger online security practices, including enabling multi-factor authentication, avoiding suspicious links and promptly reporting unusual account activity to their financial institutions.
