Cybersecurity Alarm: Two Major Nigerian Banks Hit by Data Breaches Within Days

Two Banks, Two Cybersecurity Incidents

Within the space of a week, two of Nigeria's largest financial institutions - Access Bank and Zenith Bank - have disclosed separate cybersecurity incidents involving customer data.

Although the incidents are unrelated, their close timing has sparked concern among customers and cybersecurity experts, with many Nigerians questioning whether banks are doing enough to protect sensitive personal information.

Both banks have stated that investigations are ongoing and have reassured customers that their core banking systems remain secure.

What Happened at Access Bank?

Access Bank recently disclosed that it experienced a cybersecurity incident involving customer information.

The bank has stated that its investigation found no evidence that customers' funds, account passwords, PINs, card details, or transaction systems were compromised.

According to the bank, the issue primarily involved customer data, and additional security measures have since been implemented to strengthen its systems.

Zenith Bank Confirms Limited Data Breach

Just days later, Zenith Bank also confirmed that hackers gained unauthorised access to a limited amount of customer information.

The bank said the information affected included:

• Customer email addresses.

• Phone numbers.

Zenith Bank stressed that there is no evidence that account balances, debit card details, passwords, PINs, One-Time Passwords (OTPs), or transaction records were accessed.

The bank also assured customers that all banking services continue to operate normally.

Why Personal Data Still Matters

Although neither bank has reported any loss of customer funds, cybersecurity experts warn that exposed personal information can still be valuable to criminals.

Email addresses and phone numbers can be used to launch phishing attacks, scam text messages, fake customer support calls, and other forms of identity fraud.

Fraudsters often use personal information to convince victims that they are legitimate bank representatives before attempting to steal passwords, OTPs, or other confidential details.

Banks Urge Customers to Stay Alert

Following the incidents, both banks reminded customers to remain vigilant.

Customers have been advised to:

• Never share their PIN or password.

• Never disclose One-Time Passwords (OTPs).

• Ignore suspicious emails or text messages requesting personal information.

• Verify any unexpected communication directly through official bank channels.

• Report suspicious activity immediately.

The banks emphasised that they will never ask customers to reveal confidential banking credentials through phone calls, emails, or social media.

Growing Cybersecurity Challenges

The incidents highlight the increasing cybersecurity challenges facing financial institutions as more Nigerians rely on digital banking, mobile apps, and online payments.

Cybercriminals are becoming more sophisticated, making continuous investment in cybersecurity essential for banks and other financial institutions.

Industry experts believe financial institutions must continue strengthening their digital infrastructure while educating customers about online fraud and identity theft.

The Bottom Line

The recent cybersecurity incidents involving Access Bank and Zenith Bank have once again brought data protection into the spotlight.

Although both banks maintain that customer funds remain secure and that sensitive banking credentials were not compromised, the breaches serve as a reminder that protecting personal information is just as important as protecting money.

As cyber threats continue to evolve, both banks and customers will need to remain vigilant to reduce the risk of fraud and identity theft.