Zenith Bank

We noticed a significant data leak originating from Zenith Bank, a prominent financial institution in Nigeria. The discovery was made on September 8th, 2025, when a substantial dataset appeared on a well-known cybercrime forum. What struck us immediately was the sheer volume of personally identifiable information (PII) exposed, suggesting a deep compromise rather than a superficial intrusion. The nature of the data points—including contact and demographic details—indicates a potential for large-scale social engineering or direct targeting of individuals.

The breach, which came to light on September 8th, 2025, involved a database compromise at Zenith Bank. Analysis of the leaked data reveals a total of 264,923 unique records, comprising sensitive customer information. The exposed data types include Email Addresses, Phone Numbers, First Names, and Last Names. While physical addresses were also mentioned in the initial report, our analysis primarily confirms the aforementioned PII categories within the shared dataset. The source structure appears to be a direct dump from a customer database, likely a relational system given the structured nature of the PII. The leak location was a prominent cybercrime forum, indicating an intent to monetize or distribute the compromised information to other malicious actors.

At the time of this analysis, there has been limited public reporting on this specific Zenith Bank breach. However, the nature of the exposed data aligns with broader trends in financial sector cybercrime, where PII is frequently exfiltrated for identity theft, phishing campaigns, and account takeover attempts. Research from organizations like Verizon's Data Breach Investigations Report consistently highlights the financial sector as a prime target for such attacks, with database breaches being a common vector. The exposure of nearly a quarter-million customer records on a public forum suggests a potential for widespread impact, and we are monitoring for any subsequent exploitation or further dissemination of this data.