Zanaco Bank listed by the Clop ransomware group

Overview

The Clop ransomware group has listed Zanaco (Zambia National Commercial Bank Plc), a major Zambian bank founded in 1969, on its leak site. The bank offers personal and business banking and digital services. The listing appeared on 7 November 2025. At the time of analysis, the group's leak page was not reachable.

What was published

The group claims to have exfiltrated data from the bank. The archive is expected to include customer records, banking information and financial data.

Risks for affected individuals

• Banking customers could face phishing using authentic account details.
• Financial data combined with personal information enables identity theft.
• Account information may be used in social engineering.

What remains unknown

• The volume of customer records involved.
• The exact contents of the leak.
• Whether the data has been published elsewhere.

What affected people should do

Customers should change passwords and PINs, enable transaction alerts, and never share one-time passwords. The bank should issue an official statement and notify regulators while the claim is investigated.