Loading story…
Zenith Bank Plc and three co-defendants are set to be arraigned in Nigeria over allegations that they illegally accessed and disclosed confidential financial records belonging to Makers Island Company Limited. The case is before the Federal High Court in Abuja and centers on claims of unauthorized access to sensitive financial information, framing the matter as an alleged data breach involving protected customer or corporate records.
The other defendants named in the case are Oluwaseyi Famousa, Paul Oku, and Yesu-Felix Abosede Alice. Court filings cited in local reporting indicate prosecutors are pursuing the matter as an unlawful access and disclosure case tied to financial data, placing a major bank at the center of a criminal proceeding over alleged mishandling of confidential records.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
A Federal High Court in Abuja set July 21, 2026, for the arraignment of Zenith Bank Plc and three co-defendants over allegations that they illegally accessed and disclosed confidential financial records belonging to Makers Island Company Limited.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A breach at UK law firm **ACS:Law** exposed confidential data on thousands of broadband subscribers accused of illegal file-sharing, including people allegedly linked to adult-film downloads. Reports said the leak followed disruption tied to **Operation Payback**, after which a backup file was mistakenly left publicly accessible and then widely redistributed online. The exposed material included roughly 1,000 internal emails, names, addresses, IP addresses, compensation demands, case notes, and in some cases payment details and correspondence from accused individuals; affected customers were reported across **Sky**, **PlusNet**, and other ISPs, with totals rising from more than 5,000 to well over 8,000 records as additional files surfaced. The incident triggered scrutiny from the UK **Information Commissioner's Office** and the **Solicitors Regulation Authority**, with regulators examining whether ACS:Law had failed to protect sensitive personal data under the Data Protection Act and whether fines of up to **£500,000** were warranted. ISPs including Sky said they were deeply concerned and suspended cooperation until adequate safeguards were shown, while critics said the leak underscored longstanding problems with ACS:Law's mass-enforcement tactics and reliance on IP-address evidence. Months later, solicitor **Andrew Crossley** told the High Court he had stopped pursuing alleged file-sharers, citing criminal attacks, hacked emails, and threats against him and the firm.
Jun 29, 2026
Charter Communications confirmed a data breach after **ShinyHunters** threatened to leak allegedly stolen data, with the group claiming it accessed the company on April 1 through a voice-phishing attack that compromised an employee's Microsoft Entra account and opened a path into Charter's Salesforce environment. The attackers said they stole **40 million customer records**, including names, contact details, plan information, support ticket data, and some customer proprietary network information, while Charter said it notified authorities and, based on the data published, no sensitive personal information or CPNI was exfiltrated. The Charter incident follows a broader ShinyHunters extortion campaign targeting enterprise single sign-on accounts and connected SaaS platforms, especially **Salesforce**. In a separate case, the group claimed it stole several terabytes of data from **ZenBusiness** via platforms including Salesforce, Snowflake, and Mixpanel, and threatened to publish the data unless the company responded. Reporting also linked the campaign to claims involving Ameriprise Financial, Infinite Campus, Bumble, Hinge, Match, OkCupid, Mercer Advisors, Beacon Pointe Advisors, and attacks affecting Instructure's Canvas platform, underscoring a repeatable pattern of social engineering, SaaS data theft, and leak-site extortion.
Jun 29, 2026
Ukraine’s National Bank (NBU) took its **collectible coin/numismatic online store** offline after a cyberattack against a supporting **contractor** potentially exposed customer registration data (names, phone numbers, emails, and delivery addresses). The NBU said **core banking systems were not affected** and **no payment card or banking data** was compromised, but warned the exposed PII could be leveraged for **phishing** and other follow-on fraud; the incident was described as consistent with a **supply-chain** intrusion path. In France, authorities disclosed illegal access to a portion of the **National Bank Accounts File (FICOBA)**—a government database used for tax, customs, and law-enforcement purposes—after an attacker **impersonated a civil servant** and used valid credentials to query data. Officials said up to **1.2 million accounts** may have been impacted, with exposed fields potentially including account numbers, names, addresses, and in some cases tax identifiers; **DGFiP**, supported by **ANSSI**, is investigating and notifying affected individuals while banks were alerted to heighten fraud/phishing monitoring. Separately, **Safran Group** denied being cyberattacked, stating that a leaked dataset containing “non-strategic” order/customer details was **inadvertently exposed via a third-party provider**, with external analysis suggesting the compromise occurred elsewhere in the supply chain rather than within Safran’s own systems.
Jun 29, 2026