Zenith Bank Plc listed by the ExfilSquad ransomware group
Zenith Bank Plc
Overview
The ExfilSquad ransomware group has claimed an attack on Zenith Bank Plc, one of Nigeria's largest commercial banks, and lists approximately 90 million records for sale. The group states the archive contains customer personal information, banking relationships, account data, financial records, government identifiers and customer support cases. The claim was posted on 26 July 2026.
What was published
The group's summary describes a large dataset assembled from the bank's customer and support systems. The claimed contents include:
- Customer personal information and contact details
- Banking relationship and account information
- Financial data and transaction-related records
- Government identifiers
- Customer contact and support case data
No public download link was visible; the group appears to be offering the data for sale rather than releasing it freely.
Risks for affected individuals
- The scale of the claim, if accurate, would make Zenith customers a prime target for phishing and vishing.
- Government identifiers combined with banking data enable identity theft and loan fraud.
- Account information could be used in social engineering against bank staff and customers.
What remains unknown
- Whether the claimed 90 million records have been verified.
- The true composition of the dataset and its provenance.
- Whether the bank has confirmed the breach or contacted regulators.
What affected people should do
Zenith Bank customers should change passwords and PINs, enable transaction alerts, and never share one-time passwords. The bank should issue an official statement, notify the Central Bank of Nigeria, and provide clear guidance on protecting accounts while the claim is investigated.