Identity Theft Gets Easier Because of the ZODML Breach: 6,733 Nigerians at Risk

HEROIC analysts identified a database breach affecting the Zaccheus Onumba Dibiaezue Memorial Libraries (ZODML), a Nigerian non-profit organization dedicated to providing free educational resources and promoting self-directed learning across the country. The breach was disclosed on August 3rd, 2023, and exposed 6,733 records containing email addresses and password hashes. Because ZODML serves a broad public audience with limited cybersecurity resources, the impact on affected users is likely to go unaddressed without outside awareness.

How Identity Theft Follows When Non-Profit User Data Is Exposed

Attackers do not discriminate based on the mission of an organization. When 6,733 email addresses and password hashes leak from a public educational platform, the affected users become targets for credential stuffing, phishing, and identity theft. Library and educational portal users span every age group and level of technical sophistication. Many will not recieve a breach notification, will not know to change their passwords, and will continue using the same credentials on other services. This is exactly the window attackers exploit to compromise secondary accounts, intercept communications, and collect personal information for financial fraud.

What Was Exposed in the Zaccheus Onumba Dibiaezue Memorial Libraries Breach

• Email Address
• Password Hash

Why This Breach Puts 6,733 People at Ongoing Risk

The password hashes in the ZODML breach are listed as an unknown format, which means they could be weakly hashed or even stored in a reversable format. Until proven otherwise, every affected user should treat their password as compromised. Email addresses tied to an educational non-profit are also valuable for social engineering attacks. Phishing emails impersonating ZODML or related educational organizations can be highly convincing to users who genuinely trust those institutions. Combined with a matching password, these credentials could also unlock accounts on government, banking, or employment platforms where the same login was reused.

How a Database Breach Works

A database breach occurs when an unauthorized party gains access to a backend data store, most commonly through exploited web application vulnerabilities, misconfigured server permissions, or compromised administrative accounts. Once access is established, an attacker can export user tables containing email addresses, passwords, and other personal data. Non-profit organizations like ZODML are frequent targets precisely because they often operate with limited IT budgets and security staffing, making it harder to maintain up-to-date defenses. The occured data exposure at ZODML reflects a systemic challenge facing underfunded public-service organizations globally, where the people who rely on their services the most are the ones left most exposed.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches over 400 billion compromised records, including datasets from non-profit and educational platform breaches like ZODML. If you or someone you know has ever used the ZODML portal or a related Nigerian educational service, run a free scan to find out exactly what has been exposed. Early awareness is the most effective protection against the account takeovers and identity theft that follow breaches like this one.