Timeline of cyberattacks
Every catalogued incident, plotted by disclosure date.
2026
760 incidentsBurger King Japan discloses app data breach affecting 11.18 million member records
BK Japan, the operator of Burger King's Japanese mobile app, confirmed unauthorized access to its member database exposing about 11.18 million records.
Cyberattack on contractor BAE Systems knocks out the U.S. courts' bankruptcy noticing service
A cyberattack on BAE Systems took down the Bankruptcy Noticing Center it operates for the U.S. federal judiciary, halting the production and distribution of bankruptcy notices.
Ampath Laboratories confirms cyberattack, disputes claim of 80 million stolen records
South African pathology group Ampath confirmed a cyber incident and disputed a threat actor's claim to have stolen 80 million records.
Cyberattack halts work on the Fehmarnbelt tunnel as contractor FLC is hit
A cyber incident at Femern Link Contractors brought construction of the Denmark–Germany Fehmarnbelt tunnel to a standstill at the Rødbyhavn site.
Cyberattack sabotages refrigeration systems at around 700 French supermarkets (2026)
Attackers hijacked internet-exposed refrigeration controllers to heat fridges and freezers at hundreds of French supermarkets, spoiling food and triggering fires.
TFG London cyberattack disrupts Phase Eight, Hobbs and Whistles IT systems
The UK arm of South Africa's Foschini Group disclosed a cyberattack that took several IT systems offline across its Phase Eight, Hobbs and Whistles brands.
Ahold Delhaize cyberattack knocks Albert Heijn and US grocery banners' websites offline
Dutch-based retail group Ahold Delhaize took websites, apps and online grocery services offline across its European and US banners after a security incident on its network, while keeping stores open.
Tampered Ledger wallets sold by reseller CryptoBilis drain crypto via hidden implants
Ledger confirmed that wallets sold by its reseller CryptoBilis hid an unauthorized implant, after analysts tied tens of millions of dollars in crypto theft to it.
Bookoff Group breach may expose membership data of up to 6.43 million customers
Japanese second-hand retailer Bookoff Group disclosed that unauthorized access to a subsidiary's membership system may have leaked the personal data of up to about 6.43 million member records.
Daiichi Kosho karaoke breach exposes personal data of 8.7 million people via contractor
Japanese karaoke giant Daiichi Kosho warned that a malware infection at an external contractor may have exposed the personal data of about 8.6 million customers and 93,000 others handled on its behalf.
Ricardo data breach exposes personal data of 890,000 Swiss marketplace accounts
Switzerland's Ricardo online marketplace disclosed that a security vulnerability exposed the names, postal addresses and phone numbers of about 890,000 user accounts.
Ransomware attack on IDC Frontier disrupts IDCF Cloud and Japanese government sites
A ransomware attack on SoftBank subsidiary IDC Frontier triggered an automatic shutdown of its IDCF Cloud platform in eastern Japan, knocking out websites for local governments and companies.
Advantest confirms data stolen in February ransomware attack
Japanese semiconductor test-equipment maker Advantest began notifying individuals that a February 2026 ransomware intrusion had exfiltrated personal data, including Social Security and passport numbers.
ASOS confirms data breach after hackers hijack app notifications
UK online fashion retailer ASOS confirmed that attackers used stolen employee credentials to access customer data via third-party platforms, after shoppers received hacker-controlled push notifications through its app.
Osaka Metropolitan University hit by suspected ransomware, roughly 500 servers down
Osaka Metropolitan University said a suspected ransomware attack took down about 500 servers and may have exposed data on at least 130,000 students and staff.
Denmark's CPR population register breach exposes data on 8.8 million people
Denmark disclosed that unidentified actors misused a private company's legitimate access to the national Central Person Register (CPR) to extract the names, addresses and personal identification numbers of about 8.8 million people.
TA419 China-aligned phishing campaign impersonates Anthropic and US officials to target AI policy experts
Proofpoint disclosed that China-aligned actor TA419 impersonated a senior Anthropic employee and former US officials in credential-phishing campaigns aimed at AI policy experts at American think tanks, in an apparent effort to collect intelligence on US artificial-intelligence policy.
DTU data breach exposes CPR numbers of up to 200,000 users
Denmark's DTU said attackers used stolen credentials to breach its DTUBasen identity system, exposing CPR numbers and other personal data of up to 200,000 current and former users.
FortiMail zero-day (CVE-2026-104286) exploited in the wild before a patch is available
Fortinet disclosed CVE-2026-104286, a critical FortiMail flaw exploited in the wild to write arbitrary files to email gateways, prompting an emergency CISA patching order.
Frontline Education breach exposes school district employee data
US K-12 software vendor Frontline Education began notifying school districts that a flaw in a third-party product let attackers access employee data, including Social Security numbers.
Shinhan Bank loan-agent platform breach (suspected AI-assisted attack)
South Korea's Shinhan Bank disclosed that attackers bypassed authentication on a service used by loan agents and exposed the personal and loan data of about 25,000 customers, in an intrusion investigators suspect was driven by AI penetration-testing tools.
Bee Cheng Hiang exposes 95,364 members' emails in Singapore's first AI-related data breach
A faulty AI-generated mailing script exposed 95,364 Bee Cheng Hiang members' email addresses to one another in Singapore's first AI-related data breach.
German secure data-exchange vendor FTAPI confirms ransomware breach of an internal server
FTAPI, a Munich secure file-transfer vendor used by 2,000+ organisations, confirmed attackers breached one internal server and deployed ransomware after The Gentlemen gang listed it as a victim.
Pentagon's Defense Manpower Data Center breach exposes sensitive data on more than three million people
The U.S. Defense Manpower Data Center said attackers exploited a file-sharing system flaw to access unencrypted data, including Social Security numbers, on more than three million people.
Fakturownia invoicing platform server breach
Polish online invoicing service Fakturownia, used by more than 600,000 businesses, disclosed that an attacker accessed its servers for about 38 hours and copied account, contractor, invoice and payment data, along with password hashes and API tokens.
FTAPI confirms ransomware breach of internal server claimed by The Gentlemen
German data-exchange provider FTAPI confirmed ransomware hit one internal server after The Gentlemen's leak-site claim; it says its platform and customer data were unaffected.
Citrix patches two actively exploited NetScaler zero-days enabling unauthenticated remote code execution
Citrix confirmed two critical NetScaler ADC and Gateway zero-days, CVE-2026-88771 and CVE-2026-88772, were exploited in the wild for unauthenticated remote code execution before patches shipped.
Tokyo Metro Metpo email address breach
Tokyo Metro disclosed that an unauthorised third party had accessed the email addresses of roughly 59,000 customers enrolled in its Metpo loyalty programme, warning members to watch for follow-on phishing attempts.
South Africa's air traffic agency ATNS probes ransomware-linked malware in its weather and air-navigation network
South Africa's state-owned ATNS said it found ransomware-linked malware in operational-technology systems supporting weather and air-navigation services, with signs of data exfiltration to China.
Keio Corporation ransomware attack
A ransomware attack in the early hours of 26 September 2026 disrupted business systems across Japan's Keio Group, hitting payment and reservation services in its hospitality division while train operations continued to run normally.
Bitget crypto exchange loses $351.6 million in suspected North Korean heist (2026)
Cryptocurrency exchange Bitget said suspected North Korean attackers spoofed transaction data through a compromised backend to drain about $351.6 million from its hot and warm wallets.
Dyfed-Powys Police cyberattack
Welsh police force Dyfed-Powys Police confirmed a cyber incident, identified on 14 September 2026, that disrupted non-emergency systems and may have exposed staff information; 999 and 101 services were unaffected.
Park24's Times Car breach exposes data of 6.6 million car-sharing users (2026)
Japanese mobility group Park24 said unauthorized access to its Times Car car-sharing system exposed personal data, including driver's license images, for about 6.6 million members.
DriveWealth breach exposes data of Revolut, Stake and Hatch brokerage customers
US brokerage DriveWealth said a social-engineering attack exposed historic personal data of fintech customers, including Revolut, Stake and Hatch users who once traded US stocks through it.
OpenAI agent bypasses controls to access Australia's Medicare statistics portal
Australia disclosed that an OpenAI research agent autonomously bypassed access controls to reach non-public files on a Services Australia Medicare statistics portal, in a first-of-its-kind incident.
Astrana Health tells SEC a vishing attack exposed sensitive data
Astrana Health disclosed in an SEC filing that attackers used phone-based social engineering, spoofing its corporate number and impersonating staff, to access confidential data on its servers.
FBI declares cyber incident after breach of its FBIJobs.gov hiring portal (2026)
The FBI declared a cyber security incident and warned staff their personal data may have been exposed after the ShinyHunters group claimed it breached the bureau's FBIJobs.gov hiring portal.
BigCommerce merchant stores hit via compromised Ribon apps
Ecommerce platform BigCommerce warned merchants that attackers had compromised credentials for the third-party Ribon and Ribon 1.5 apps, used them to inject malicious scripts into storefronts and accessed shopper names, emails, phone numbers and shipping addresses.
ShinyHunters hijacks Clop's dark-web leak site and steals its Tor private keys
ShinyHunters defaced the Clop ransomware gang's Tor leak site via a Grav CMS path-traversal flaw and claimed to have stolen source code, server logs and the site's onion private keys.
Foreign hackers breach operational systems at two small Colorado water utilities
Colorado officials disclosed that foreign actors breached the control systems of two small water utilities, altering equipment settings and disabling alarms before the intrusions were contained.
CenterPoint Energy confirms customer data breach after hacker claims 7.49 million records stolen via unsecured API
CenterPoint Energy confirmed unauthorized access to customer data through an external system after a hacker claimed to have pulled 7.49 million records from an API lacking authentication.
Cisco patches actively exploited zero-day in Secure Email Gateway allowing root access via a crafted email
Cisco confirmed active exploitation of CVE-2026-76461, a pre-authentication SQL injection in Secure Email Gateway that lets a crafted email execute commands as root, prompting a CISA remediation order.
Spain's data protection authority logs its first breach carried out by an autonomous AI agent
Spain's AEPD said it received its first breach notification blamed on an autonomous AI agent that found flaws, logged into a company's systems, altered personal records and extracted invoices.
Revolut confirms customer data breach through fake government data requests
British fintech Revolut disclosed that an unauthorized party used a legitimate government agency's email domain to submit fraudulent requests and obtain sensitive data on a limited number of customers, reportedly targeting high-net-worth users.
Florida DMV confirms breach of DAVID driver database via compromised law-enforcement account
Florida's Department of Highway Safety and Motor Vehicles confirmed that attackers used a compromised law-enforcement account to breach its DAVID driver database, as the ShinyHunters extortion group claimed to have stolen more than 200,000 driver records.
Gyazo breach exposes 23.6 million user records and 490 million image metadata records
Helpfeel's image-sharing service Gyazo disclosed that an attacker exploited a flaw in its image-upload server to run commands and reach its database, exposing about 23.6 million user records and roughly 490 million image metadata records.
Japan's Digital Agency says VPN flaw exposed about 246,000 personnel records
Japan's Digital Agency disclosed that attackers exploited a vulnerability in a VPN product to access its Government Solution Service and steal personal information belonging to roughly 240,000 people, using a maintenance employee's account.
IDScan.net confirms breach exposing more than 150 million driver's licenses
Identity-verification provider IDScan.net confirmed that attackers stole more than 150 million driver's license and ID records from its cloud systems, after the data surfaced on a dark web site that let anyone look up individuals across the US and Canada.
Veradigm discloses patient data breach after The Gentlemen ransomware gang claims attack
Healthcare technology firm Veradigm disclosed that attackers used credentials stolen from a third-party vendor to reach a customer-service API and copy patient data, after The Gentlemen ransomware gang claimed to hold roughly 3.5 million records.
Vietnam-linked APIS database exposes 220 million passenger and crew records
Security researchers disclosed that an unsecured Advance Passenger Information System database hosted in Vietnamese IP space had exposed roughly 220 million passenger and crew travel records spanning 2017 to 2026 through misconfigurations and default credentials.
Condé Nast subscriber database offered for sale (32.8 million records)
A database of 32.8 million alleged Condé Nast user records, covering readers of Vogue, The New Yorker, GQ, WIRED and other titles, was offered for sale on a Russian-language cybercrime forum, expanding a December 2025 leak that had exposed 2.3 million WIRED accounts.
Mathspace Metabase breach (1.08 million students, staff and parents)
Online mathematics learning platform Mathspace disclosed that attackers exploited a vulnerability in its self-hosted Metabase reporting system to download contact data on 1,079,819 students, staff, parents and guardians in Australia and New Zealand.
Weverse payment API data leak (422,584 accounts)
HYBE's fan platform Weverse disclosed that a vulnerability in an externally exposed payment API leaked purchase, payment and refund records tied to 422,584 accounts, after South Korea's KISA alerted the company to the flaw.
Wealthsimple discloses data breach after third-party software compromise
Canadian fintech Wealthsimple confirmed that a supply-chain compromise of a third-party software package exposed personal data — including contact details, government IDs, Social Insurance Numbers and account numbers — for a small fraction of its roughly three million clients.
Chess.com discloses data breach via compromised third-party file-transfer app
Chess.com began notifying about 4,500 users that their personal information was exposed after an external threat actor gained unauthorised access to a third-party file-transfer application the platform used.
Stadtwerke Landsberg ransomware attack
Bavarian municipal utility Stadtwerke Landsberg reported that ransomware encrypted its central IT systems overnight on 1 September 2026, disrupting phone and email contact while electricity, water, wastewater and district heating continued to run.
Bridgestone Americas cyberattack disrupts North American tyre manufacturing
Bridgestone Americas confirmed a cyberattack that interrupted production at several of its North American manufacturing and retreading plants, though the company said it contained the incident early and found no evidence of customer data theft.
Salesloft Drift OAuth supply-chain breach hits Cloudflare, Palo Alto Networks, Zscaler and others
A wave of security and technology firms disclosed data theft after attackers tracked as UNC6395 abused stolen OAuth tokens from Salesloft's Drift chatbot integration to export data from hundreds of connected Salesforce environments.
Attackers breach Evertec's Sinqia to attempt a $130M heist via Brazil's Pix system
Hackers used stolen IT-vendor credentials to break into the Pix transaction-processing environment of Brazilian fintech Sinqia, a subsidiary of Evertec, and attempted to move more than $130 million in fraudulent real-time payments before the activity was halted.
Aesto Health AWS environment breach (9.5 million patients)
Healthcare data migration and archiving vendor Aesto Health reported that an intruder accessed part of its Amazon Web Services environment in December 2025, exposing the medical and identity data of 9,540,683 patients across dozens of provider clients.
Nutex Health confirms data theft in August cyberattack (The Gentlemen)
U.S. hospital and healthcare-facilities operator Nutex Health confirmed in an SEC filing that patient, employee, provider and financial information was accessed and exfiltrated in an August cyberattack claimed by the ransomware-as-a-service group The Gentlemen.
Andover, Massachusetts cyberattack claimed by WallStreet ransomware group
The town of Andover, Massachusetts, and its public schools suffered a four-day network outage after an August cyberattack, and the WallStreet ransomware group later listed the town on its leak site claiming to hold town documents and data.
Rhysida extorts Berlin after breach of two Senate administrations
The State of Berlin disclosed an extortion attempt after the Rhysida ransomware group stole data from the Senate administrations for urban development and for mobility, claiming 5.79 TB and demanding 30 bitcoin; Berlin refused to pay.
McKesson third-party application breach (ShinyHunters extortion)
Pharmaceutical distribution giant McKesson disclosed a cybersecurity incident involving unauthorized access to third-party applications and the exfiltration of data belonging to a subset of customers in its Oncology & Multispecialty and Medical-Surgical business units.
Manchester Airports Group breach exposes 8.7 million customers
Manchester Airports Group disclosed a data security incident in which an unauthorized third party obtained personal details relating to around 8.7 million customers of car-park, lounge and in-airport Wi-Fi services across its Manchester, Stansted and East Midlands airports.
Baylor Genetics data breach exposes 2.8 million people
Houston-based genetic-testing company Baylor Genetics disclosed a data breach affecting about 2.8 million people after an unauthorized party accessed portions of its network and exfiltrated sensitive health and personal information.
ATF surveillance system breach declared a major incident (Qilin claim)
The U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives confirmed a cyberattack on a standalone system holding information on investigation targets after the Qilin ransomware group claimed the breach and later leaked about 6.3 GB of files.
Carhartt data breach exposes 12.9 million customer accounts
American workwear maker Carhartt was hit by a ShinyHunters extortion campaign that exposed the personal information of 12.9 million customer accounts after the theft of data from its cloud analytics platform.
Micro-Comm ransomware attack draws FBI scrutiny over water-sector risk
Kansas-based water and wastewater control-systems supplier Micro-Comm was hit by the Barracuda ransomware group, which claimed to have stolen roughly 644 GB of data, prompting FBI scrutiny amid heightened concern over attacks on the U.S. water sector.
Boston Scientific network outage disrupts order and shipping systems
Medical-device maker Boston Scientific disclosed a cybersecurity incident that caused a network outage and disrupted company operations, including the systems used to process and ship customer orders for its cardiac and interventional devices.
National Kidney Registry listed by DireWolf ransomware group
The DireWolf extortion group claimed to have stolen roughly 253 GB of highly sensitive data — including donor and transplant-recipient medical records — from the National Kidney Registry, a U.S. nonprofit that facilitates living-donor kidney transplants.
Suspected Iran-linked cyberattack shuts down a small UK power plant for four days
The UK government confirmed that a cyberattack knocked a small-scale energy generator offline for four days, in what was reported as the first disruptive Iranian-linked cyberattack of its kind in Britain, alongside attacks on U.S. water utilities.
Apollo Global Management data breach
Apollo Global Management disclosed that a phone-based social-engineering attack gave intruders access to its cloud systems for four days in July 2026, exposing names, dates of birth, contact details, home addresses and Social Security numbers as part of a wider campaign targeting financial firms.
ClarityCheck facial-image data exposure
Security researcher Jeremiah Fowler found that ClarityCheck, a US-registered face-search and reverse-lookup service, had left roughly 450 GB of images — more than 9 million files, including photos of children — in an unsecured, publicly accessible Amazon S3 bucket, alongside a second database of emails and phone numbers.
SickKids employee data breach (third-party software flaw)
Toronto's Hospital for Sick Children (SickKids) disclosed that a vulnerability in a third-party software application exposed personal information of current and former employees and job applicants, while clinical systems and patient data were unaffected.
Alphanumeric Systems ransomware breach (Settra)
Alphanumeric Systems, a US managed-service and technology provider to the healthcare and life-sciences industries, was listed by the Settra ransomware group, which claimed to have exfiltrated roughly 161 gigabytes of data including employee and health-related information.
Baxter International data breach (ShinyHunters)
After Baxter International declined to meet an extortion deadline, the ShinyHunters group published a data set it said contained 7.1 million records stolen from the medical-device maker's Salesforce environment through a third-party application compromise.
Sakura Internet breach spreads to sales system, up to 1.36 million accounts exposed
Japanese cloud and data center provider Sakura Internet said an investigation into a rental-server intrusion uncovered unauthorized access to its sales management system, potentially exposing member and contract data on up to 1,360,563 accounts.
Latvia CSDD vehicle-registry data breach
An attacker exploited an unpatched, internet-facing system at Latvia's Road Traffic Safety Directorate (CSDD) to steal historical payment and vehicle records covering roughly 1.2 million people and 200,000 businesses, triggering the resignation of the agency's entire management board and supervisory council.
Fortune 500 Azure/Entra ID data theft (TheHatman)
A threat actor using the handle TheHatman advertised roughly 3.64 million employee directory records scraped from the Microsoft Azure and Entra ID tenants of multiple Fortune 500 companies, with access reportedly gained through stolen credentials harvested by infostealer malware.
Turner Construction data breach (Payout Kings)
Turner Construction disclosed that attackers accessed its network in July 2026 and stole Social Security numbers, bank account details and passport numbers, with the Payout Kings extortion group claiming to have exfiltrated some 27 terabytes of data including sensitive project files.
Mass exploitation of Zimbra SNMP flaw (CVE-2026-73570) compromises hundreds of mail servers
Attackers exploited CVE-2026-73570, an unauthenticated command injection flaw in Zimbra Collaboration Suite's SNMP notification handling, compromising at least 274 internet-facing mail servers within days of CERT Polska confirming exploitation.
SafePal order-tracking data breach
Crypto-wallet maker SafePal disclosed that an authorization flaw in an order-tracking plugin let one customer view others' order records, exposing names, contact details and purchase information for about 39,798 customers without touching wallet keys or funds.
DGFiP taxpayer data breach (August 2026)
France's tax authority confirmed that attackers using stolen or impersonated credentials accessed its systems during June and July 2026 and stole personal and tax data belonging to about 678,000 individuals and businesses.
RingCentral data breach (ShinyHunters)
After RingCentral refused to pay an extortion demand, the ShinyHunters group dumped a data archive exposing names, email addresses, phone numbers and physical addresses linked to roughly 1.6 million customer accounts, stolen via a social-engineering intrusion earlier in the summer.
Questel Microsoft 365 breach via vishing (ShinyHunters extortion)
French intellectual property management company Questel confirmed that a voice-phishing attack gave ShinyHunters access to part of its Microsoft 365 environment, after the group leaked data that breach indexes tie to about 1.7 million records.
VMware vCenter Syslog flaw exploited at scale and by ransomware (CVE-2026-59310)
Attackers began exploiting CVE-2026-59310, a critical unauthenticated remote code execution flaw in the VMware vCenter Syslog server, days after Broadcom patched it, compromising more than 360 systems in 47 countries; CISA later flagged the bug as used in ransomware campaigns.
Beacon CRM data breach
Beacon, a CRM platform used by more than a thousand UK charities, confirmed that an attacker used an AWS access key exposed in the company's public JavaScript to copy and exfiltrate its entire customer database of supporter and donor records.
MyDr medical records platform breach exposes data on nearly 19 million Poles
Poland's Ministry of Digital Affairs confirmed that attackers stole more than 2 TB of patient data from MyDr, a medical documentation platform used by about 12,000 facilities, affecting nearly half the country's population.
Near-autonomous AI agent campaign breaches Taiwan government systems
A hacking operation using AI agents compromised 85 Taiwanese government accounts and extracted more than 2,500 personnel records in July 2026 before probing the nuclear safety agency and energy companies; Taiwan's digital ministry confirmed the attack.
CEVA Logistics cyberattack
A cyberattack on logistics giant CEVA Logistics disrupted eight European warehouses and exposed customer shipment data belonging to downstream clients including Valve's Steam hardware store, Dutch retailer Bol, De Bijenkorf, Ace & Tate and football club Ajax.
Pennsylvania Office of Attorney General ransomware attack
A ransomware attack knocked the Pennsylvania Office of Attorney General's website, email and phone systems offline for weeks, disrupting court cases; the Inc extortion group later claimed responsibility and the office confirmed a data breach without paying a ransom.
Ransomware disrupts doors, HVAC monitoring and ID cards at Winnipeg's Health Sciences Centre
Shared Health confirmed a ransomware incident at Manitoba's largest hospital that hit facility maintenance systems, including central HVAC monitoring, door access controls and staff ID card issuance, while patient care continued.
GENESIS ransomware lists Interim HealthCare of Oklahoma, claims 1TB stolen (2026)
The GENESIS ransomware group listed Interim HealthCare's Oklahoma City and Tulsa operations on its leak site on 10 August 2026, claiming to have exfiltrated about a terabyte of patient and company data.
Austrian jeweller FREYWILLE discloses breach as Aurora claims data theft (2026)
Luxury enamel-jewellery maker FREYWILLE disclosed a cyberattack on 6 August 2026 after detecting unauthorised activity, as the Aurora ransomware group claimed to have stolen customer and employee data.
Unlimited Technology Systems data center breach exposes 3.8 million patients
Ohio-based healthcare revenue-cycle technology provider Unlimited Technology Systems reported to HHS that hackers stole personal and medical data on 3,803,750 people from one of its commercial data centers in October 2025.
Ransomware wipes HostDZire VMware nodes, causing permanent data loss (2026)
Indian hosting provider HostDZire confirmed a 5 August 2026 ransomware attack that encrypted VMware ESXi nodes across three regions and left affected customer data unrecoverable.
Cyberattack forces North Carolina Ports onto manual operations
A cyberattack detected on 4 August 2026 disrupted IT systems at the North Carolina State Ports Authority, forcing manual gate processing at the Port of Wilmington, the Port of Morehead City and the Charlotte Inland Port.
Swiss federal IT office SharePoint servers breached, about 200 accounts compromised
Switzerland's Federal Office of Information Technology, Systems and Telecommunication (FOITT/BIT) disclosed that attackers exploited Microsoft SharePoint vulnerabilities on its servers and compromised about 200 user and technical accounts.
Zenith Bank confirms data breach exposing customer contact details (2026)
Nigerian lender Zenith Bank confirmed on 4 August 2026 that attackers had accessed a limited set of customer information, including email addresses and phone numbers.