Nigeria’s banking sector is facing another cybersecurity scare after Zenith Bank confirmed that hackers gained unauthorized access to a limited section of its customer database.
The bank said the breach exposed only customer email addresses and phone numbers, while critical financial information such as account balances, PINs, passwords, OTPs, card details, and login credentials remain protected.
Zenith Bank assured customers that its mobile banking, internet banking platforms, branches, and core banking systems are fully operational. The institution said it immediately activated its cybersecurity response team and is working with security experts to investigate the source and extent of the attack.
According to the bank, the incident appears to be part of a larger global cyberattack campaign targeting organizations across different industries, as cybercriminals continue to focus on financial institutions due to the huge amount of valuable data they handle.
Customers have been warned to be extra careful because leaked contact details can be used by fraudsters for phishing emails, fake calls, and scam messages pretending to be from the bank.
Zenith Bank reminded customers: “The bank will never ask for your PIN, password, OTP, or card details through calls, SMS, or emails.”
Cybersecurity experts say this incident is another reminder that as Nigeria moves deeper into digital banking, protecting personal information has become everyone’s responsibility.

