CIBN Faces Alleged Major Data Breach as 250GB of Sensitive Banking Data Leaks Online
The Chartered Institute of Bankers of Nigeria (CIBN), the country’s leading professional body for bankers, is at the center of a suspected cybersecurity breach after an unidentified threat actor claimed to have compromised and leaked approximately 250GB of its internal database. The alleged breach, first reported on underground cybercrime forums, includes a trove of sensitive data belonging to banking professionals.
Preliminary reviews of sample files suggest the exposed information may contain full names, email addresses, phone numbers, residential and business addresses, membership records, scanned identification documents, professional certificates, and internal source code linked to CIBN’s digital systems. While the full dataset’s authenticity remains unverified, cybersecurity experts note the scale aligns with a rising trend of attacks targeting Nigeria’s financial sector.
Established in the 1960s, CIBN regulates banking professionalism and sets ethical and educational standards for the industry, with corporate members including the Central Bank of Nigeria and major commercial banks. The institute has previously acknowledged escalating cyber risks in the financial sector, citing threats such as ransomware, website hijacking, and data breaches many of which exploit stolen personal data for identity theft and phishing schemes.
Nigeria has seen a surge in data breaches across banking, telecommunications, and government systems in recent years, with millions of records reportedly circulating on the dark web. If confirmed, the CIBN breach would underscore persistent vulnerabilities in institutional data protection and the growing sophistication of cybercriminal operations targeting financial ecosystems.
As of now, CIBN has not issued an official statement confirming or denying the breach. However, the incident has prompted calls for a forensic investigation, member notification protocols, and a comprehensive audit of the institute’s digital infrastructure. Regulatory authorities are expected to assess the claims as part of broader efforts to address cyber threats in Nigeria’s financial services sector.
Source: https://guardian.ng/news/cibn-allegedly-hit-by-250gb-data-breach/
The Chartered Institute of Bankers of Nigeria - CIBN cybersecurity rating report: https://www.rankiteo.com/company/the-chartered-institute-of-bankers-of-nigeria-cibn-
"id": "THE1776703939",
"linkid": "the-chartered-institute-of-bankers-of-nigeria-cibn-",
"type": "Breach",
"date": "4/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': 'Banking professionals (members '
'of CIBN)',
'industry': 'Banking/Financial Services',
'location': 'Nigeria',
'name': 'Chartered Institute of Bankers of Nigeria '
'(CIBN)',
'type': 'Professional Body'}],
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Full names',
'Email addresses',
'Phone numbers',
'Residential and business '
'addresses',
'Membership records',
'Scanned identification '
'documents',
'Professional certificates',
'Internal source code']},
'description': 'The Chartered Institute of Bankers of Nigeria (CIBN) is at '
'the center of a suspected cybersecurity breach after an '
'unidentified threat actor claimed to have compromised and '
'leaked approximately 250GB of its internal database. The '
'alleged breach includes sensitive data belonging to banking '
'professionals, such as full names, email addresses, phone '
'numbers, residential and business addresses, membership '
'records, scanned identification documents, professional '
'certificates, and internal source code.',
'impact': {'brand_reputation_impact': 'Potential reputational damage to CIBN '
"and Nigeria's financial sector",
'data_compromised': '250GB of sensitive data',
'identity_theft_risk': 'High risk due to exposure of personally '
'identifiable information'},
'investigation_status': 'Ongoing',
'recommendations': ['Forensic investigation',
'Member notification protocols',
'Comprehensive audit of digital infrastructure'],
'references': [{'source': 'Underground cybercrime forums'}],
'threat_actor': 'Unidentified threat actor',
'title': 'CIBN Faces Alleged Major Data Breach as 250GB of Sensitive Banking '
'Data Leaks Online',
'type': 'Data Breach'}