Zenith Bank Confirms Cyberattack, Says Emails, Phone Numbers Accessed

LAGOS, August 5, 2026

Zenith Bank has confirmed that hackers accessed limited customer information in a cyberattack.

The bank disclosed the breach in an email sent to customers on Tuesday, August 4, 2026, ValidViewNetwork reports. Checks by ValidViewNetwork confirm the attackers obtained customers’ email addresses and phone numbers.

What The Bank Disclosed

Zenith Bank said the breach forms part of a wider global cyberattack on multiple sectors. The bank described the exposed data as limited to contact information, not financial details.

It stressed that no passwords, PINs, or one-time passcodes were compromised in the incident. ValidViewNetwork reports that the notice reached customers by email on August 4, 2026.

Banking Services Remain Unaffected, Bank Says

Zenith Bank assured customers that its “banking services and digital channels remain secure and fully operational.”

ADVERTISEMENT

The lender said core systems recorded no disruption throughout the incident. Findings show the bank activated its incident response protocols immediately after detecting the breach.

Investigations into the full scope of the attack continue, the bank said.

Customers Warned Over Phishing Risk

The bank urged customers to stay alert for phishing emails, texts, and phone calls. Attackers could use stolen contact details to impersonate the bank convincingly, it warned. Zenith Bank asked customers never to share passwords, PINs, or OTPs with anyone.

Part Of A Wider Pattern Of Bank Breaches Hackers breached customer data at Remita, Sterling Bank, and Providus Bank in March 2026. The Federal Government promised an investigation into that breach in April 2026.

ValidViewNetwork gathered that no public findings from that probe have followed since. The Central Bank of Nigeria separately warned Nigerians about fraudulent messages impersonating the regulator earlier this year.

Zenith Bank’s breach lands in a year already marked by repeated attacks on Nigerian banks. Contact details alone can fuel convincing phishing campaigns long after a breach ends.

The bank’s swift disclosure may build more trust than March’s slower, quieter response did. Whether that trust holds now depends on the investigation’s findings, not just its reassurances.