Zenith Bank confirms data breach amid rising cyber threats in Nigeria’s banking sector

Zenith Bank has revealed a cyberattack that exposed limited customer information, amid escalating cyber threats targeting financial institutions in Nigeria, with digital systems remaining secure and operational.

Zenith Bank has confirmed that hackers gained unauthorised access to part of its database in a cyberattack that exposed limited customer information, including email addresses and phone numbers, but the lender said customer money and account balances were not affected. The bank said its core banking systems, digital channels and financial services remained secure and fully operational.

In a customer email sent on Tuesday, August 4, Zenith said it detected the intrusion and immediately triggered its incident response procedures and cybersecurity controls. The bank said its investigation is continuing as it works to establish the full extent of the breach and strengthen its defences against future attacks.

The disclosure comes as financial institutions face rising pressure from increasingly sophisticated cyber threats. Recent industry reporting has pointed to a broader surge in attack activity, including a sharp rise in DDoS assaults in the first half of 2026, while security researchers have warned that phishing and one-time password scams are becoming more advanced, in some cases with artificial intelligence helping to automate attacks.

Zenith urged customers to stay alert for fraudulent emails, text messages and phone calls that may follow a data breach. It warned them not to share passwords, PINs, one-time passwords or card details, even if a message appears to come from the bank. The incident adds to wider concerns in Nigeria’s banking sector, which has faced repeated warnings from regulators and lenders over fake messages and attempts to steal personal information.