According to Legit.ng, Zenith Bank sent an email to customers on 2026-08-04 stating that attackers accessed a limited amount of customer data, including email addresses and phone numbers [1]. The bank stated there is no evidence that customer accounts, passwords, PINs, one-time passwords (OTPs), or funds were accessed, and services continue to operate normally [1]. Zenith Bank has activated incident response and investigation procedures and reminded customers to stay alert to phishing messages and never disclose financial authentication details [1].
Zenith Bank Confirms Unauthorized Access to Partial Customer Contact Information
1 min read
- Disclosed
- Aug 4, 2026
- Published
- Nov 10, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Finance
What to do nowOur advice
The bank stated there is no evidence that customer accounts, passwords, PINs, one-time passwords (OTPs), or funds were accessed, and services continue to operate normally [1].
Timeline
- Date of company public disclosure or customer notification per source[1]
Technical details
Verified Incident and Response
According to Legit.ng, Zenith Bank sent an email to customers on 2026-08-04 stating that attackers accessed a limited amount of customer data, including email addresses and phone numbers [1].
The bank stated there is no evidence that customer accounts, passwords, PINs, one-time passwords (OTPs), or funds were accessed, and services continue to operate normally [1].
Zenith Bank has activated incident response and investigation procedures and reminded customers to stay alert to messages and never disclose financial authentication details [1].
References
Media1
- [1]
“In an email sent to customers on Tuesday, August 4, 2026, Zenith Bank disclosed that the attackers were able to access a limited amount of customer information, including email addresses and phone numbers.”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.