What Happened
The Chartered Institute of Bankers of Nigeria (CIBN) experienced a significant data breach in April 2026 (not 2025) when a threat actor known as Rabid allegedly compromised approximately 250GB of the organization’s internal database and leaked it on underground cybercrime forums. The exposed data included full names, email addresses, phone numbers, residential and business addresses, membership records, scanned government-issued identification documents, academic certificates from Nigerian universities, and internal source code linked to CIBN’s digital systems. The breach affected members of Nigeria’s banking profession and posed high risks for identity theft, credential fraud, synthetic identity fraud, and follow-on intrusions against the institute’s infrastructure. As of the reporting date, CIBN had not issued an official confirmation or denial of the breach, though cybersecurity observers noted the scale was consistent with growing attacks targeting financial institutions across Nigeria’s banking ecosystem.
