By Sabiu Abdullahi
Hackers have breached the database of Zenith Bank, exposing limited customer information in a cyberattack that forms part of a wider global campaign targeting organisations across different sectors.
The bank confirmed the incident in an email sent to customers on Tuesday. It said the attackers gained access to a limited amount of customer data, which included email addresses and phone numbers.
Zenith Bank, however, assured customers that the breach did not affect its banking services or digital platforms. The lender said all its services remain secure and fully operational despite the incident.
The bank also disclosed that it has commenced an investigation into the attack. It said its incident response procedures and other cybersecurity measures were activated immediately after the breach came to light.
“As a precaution, we encourage our customers to remain vigilant against phishing emails, text messages, or phone calls, and to never disclose their password, PIN, One-Time Password (OTP), or other security credentials to anyone,” the bank said.
Zenith Bank reaffirmed its commitment to safeguarding customers’ information. It also appreciated customers for their continued confidence in the institution. The bank added that investigations into the cyberattack are still underway.
The latest incident comes about two years after Guaranty Trust Bank (GTBank) reported an attempted cyberattack on its website domain. At the time, the bank said the attempt did not compromise customers’ data.
The development also follows an earlier warning from the Central Bank of Nigeria (CBN), which alerted the public to cybercriminals attempting to gain access to Nigerians’ personal accounts through fraudulent messages and emails.
According to the apex bank, the scammers circulated deceptive emails and online messages that falsely claimed to originate from the CBN. The regulator said the messages were designed to trick recipients into revealing sensitive information.
The CBN also warned that the fake communications often urged recipients to click suspicious links. It added that the messages spread false claims about the bank’s leadership, licensing activities, and policy decisions in an attempt to mislead the public.
