ASA Nigeria (ASHA Microfinance Bank) listed by the Krybit ransomware group

Overview

The Krybit ransomware group has listed ASA Nigeria, the Nigerian arm of ASHA Microfinance Bank Limited, on its leak site. ASA Nigeria is a for-profit deposit-taking microfinance institution serving low-income customers across the country. The listing appeared on 2 August 2026.

What was published

The group claims to have exfiltrated customer and corporate data from the bank's systems. Given the institution's activity, the data likely includes loan accounts, savings records, identity documents and transaction histories. No download link or sample files were visible in the listing at the time of analysis.

Risks for affected individuals

• Banking customers could face phishing using authentic account details.
• Identity documents, if exposed, enable loan fraud and SIM swap attacks.
• Microfinance clients often lack the resources to detect financial fraud quickly.

What remains unknown

• The number of customer records affected.
• Whether the stolen data has been published or is being held for negotiation.
• The attack vector used to breach the bank.

What affected people should do

Customers of ASA Nigeria should contact the bank to confirm the status of their accounts and watch for unsolicited messages requesting personal information. The bank should publish an official statement and work with the Central Bank of Nigeria on notification and remediation.