By 
Zenith Bank Plc has confirmed that it experienced a cybersecurity incident that resulted in unauthorised access to a limited set of customer information, as cyberattacks against Nigeria’s financial institutions continue to increase.
In a customer notification issued on Tuesday, August 4, 2026, the bank disclosed that the breach exposed limited customer data, including email addresses and phone numbers. It, however, stressed that sensitive banking information, customer funds, and core banking systems were not affected.
According to the bank, the incident forms part of a broader wave of cyberattacks targeting organisations across multiple industries globally.
Zenith Bank assured customers that its banking services, digital platforms, and core infrastructure remain secure and fully operational despite the incident.
The lender said it activated its incident response procedures immediately after detecting the breach, deploying additional cybersecurity measures while investigations into the incident continue.
As part of its advisory, the bank urged customers to remain vigilant against phishing attempts that could exploit the exposed contact information.
Customers were cautioned against sharing confidential banking credentials, including passwords, Personal Identification Numbers (PINs), or One-Time Passwords (OTPs), with anyone claiming to represent the bank.
Zenith Bank also directed customers requiring assistance to contact its Zenith Direct customer support channels for further enquiries.
Cyberattacks on Nigerian banks intensify
The latest incident adds to a growing list of cybersecurity breaches affecting Nigeria’s banking industry in 2026.
Earlier this year, hackers reportedly gained unauthorised access to customer data belonging to Sterling Bank, Providus Bank, and other financial institutions. Following those incidents, the Federal Government announced plans to investigate the breaches, although no official findings have been released publicly.
Industry reports have also linked Guaranty Trust Bank to a recent website-related cybersecurity incident, highlighting the increasing frequency of attacks targeting major financial institutions.
The growing number of breaches has intensified concerns about cybersecurity resilience across Nigeria’s rapidly expanding digital banking ecosystem.
Cybercrime pressures continue to rise
Available industry data indicates that Nigeria remains one of Africa’s most targeted countries for cyberattacks.
According to cybersecurity firm Check Point Software, Nigerian organisations experienced an average of 4,361 attempted cyberattacks every week in June 2026, making the country the second most targeted nation on the continent after Angola.
The Nigeria Data Protection Commission estimates that the country experiences a cyberattack approximately every 39 seconds, while identity verification and compliance technology firm Prembly reported a 150 per cent increase in AI-powered attacks targeting Nigeria’s financial services sector over the past year.
Although fraud prevention measures have improved, financial losses remain significant.
Data from the Nigeria Inter-Bank Settlement System (NIBSS) shows that digital payment fraud losses reached ₦25.85 billion in 2025, compared with ₦17.67 billion in 2023.
Interestingly, fraud incidents declined during the period, suggesting that while attacks have become less frequent, successful attacks are causing greater financial losses per incident.
The trend is reflected across the banking industry.
Three of Nigeria’s largest banking groups—Access Holdings, GTCO, and United Bank for Africa (UBA)—reportedly recorded combined fraud and forgery losses exceeding ₦2.13 billion in 2025.
Over a longer period, the Central Bank of Nigeria’s Payments System Vision 2028 document estimates that the banking sector and its customers lost ₦134.48 billion to fraud between 2020 and 2025, out of approximately ₦187.79 billion in total attempted fraud.
Meanwhile, Deloitte’s Nigeria Cyber Security Outlook 2026 estimates that cybercrime cost Nigeria more than $3 billionbetween 2019 and 2025.
Despite these growing threats, compliance technology firm Adhere estimates that Nigeria ranks among the lowest globally in fraud protection readiness and continues to face a significant shortage of skilled cybersecurity professionals.
Regulatory focus shifts to cyber resilience
The increasing threat landscape has prompted regulators to strengthen oversight of cybersecurity and digital risk management within Nigeria’s financial sector.
The Central Bank of Nigeria has introduced several regulatory measures covering cybersecurity, anti-money laundering, consumer protection, and data governance, with multiple compliance deadlines extending through 2028.
Nigeria is also advancing new regulatory requirements that would compel organisations to disclose cybersecurity incidents, aligning with global efforts to improve breach transparency and accountability.
In addition, authorities are developing a national cybersecurity framework expected to introduce mandatory incident reporting obligations and establish minimum cybersecurity investment standards for critical sectors.
Strengthening trust in digital banking
As digital banking adoption continues to accelerate across Nigeria, cybersecurity is becoming increasingly central to financial sector resilience and consumer confidence.
While Zenith Bank maintains that customer funds, banking credentials, and core systems remain secure, the incident underscores the growing importance of robust cybersecurity frameworks, continuous monitoring, and regulatory compliance in protecting digital financial services.
Industry analysts note that as banks expand digital channels and embrace emerging technologies, strengthening cyber resilience will remain essential to safeguarding customer trust, protecting sensitive data, and sustaining the growth of Nigeria’s digital economy.
Comments