Zenith Bank Plc has confirmed that hackers recently gained access to limited customer information during a cyberattack. The bank said the compromised data was restricted to customers’ email addresses and telephone numbers.
It added that customers’ passwords, Personal Identification Numbers, One-Time Passwords and other security credentials were not affected. Banking operations and digital channels also remained fully operational throughout the incident.
According to the bank, the breach was connected to a wider cyberattack targeting organisations across several sectors globally. Zenith Bank said it activated its incident response protocols and other cybersecurity safeguards immediately after detecting the intrusion.
Measures were subsequently taken to contain the breach and investigate its origin. The investigation into the attack remains ongoing.
The lender advised customers to be particularly cautious of phishing emails, text messages and telephone calls that may exploit the exposed contact information. Criminals could use such details to impersonate bank officials and attempt to obtain confidential financial information.
Customers were reminded never to disclose their passwords, PINs, OTPs or other security credentials to anyone. Suspicious communications should be verified through the bank’s official channels before any action is taken.
Zenith Bank reaffirmed its commitment to protecting customers’ information and thanked them for their continued trust.
The institution maintained that its banking infrastructure and digital platforms remain secure. It did not disclose the number of customers affected by the breach. No financial losses linked to the incident had been announced at the time of this report.
The development comes amid growing concern over cyberattacks targeting financial institutions and their customers in Nigeria. In August 2024, Guaranty Trust Bank reported an attempt to compromise its website domain, although the bank maintained that customers’ data remained secure.
The Central Bank of Nigeria has also repeatedly warned about fraudulent messages designed to steal personal and banking information. Nigerians have been advised to avoid suspicious links and unsolicited requests for confidential details.
