ASHA Microfinance Bank: krybit Ransomware Attack

Overview

The krybit ransomware group has listed ASHA Microfinance Bank Limited on its leak site under the domain nigeria.asa-international.com. ASHA Microfinance Bank, also known as ASA Nigeria, is a for-profit deposit-taking microfinance institution operating in Nigeria. Microfinance banks serve low income customers and small businesses, which makes any exposure of their records particularly sensitive.

The incident

The listing dates the attack to 2 August 2026, and our team observed the page on the same day. The group claims to hold data from the microfinance institution and provides access to the claimed material through its leak site.

What remains unknown

• The size of the claimed dataset is not disclosed in the listing.
• The data types present in the package are not confirmed at this stage.
• Whether loan records, customer identification documents, or internal systems data are included is not detailed.
• No official response from ASHA Microfinance Bank has been published so far.

Recommended actions

Customers of ASHA Microfinance Bank should review their loan and savings account activity and change any credentials used on the bank's digital channels. The bank should be contacted through official channels for guidance. Given the sensitivity of microfinance records, affected customers should also watch for loan-related phishing attempts.