2026 ProvidusUnity Bank — customer reports of unauthorized card debits after March breach wave (Jul)
Data compromised
Unauthorized debit-card transactions reported by customers; linkage to earlier national breach wave under NDPC review—no attested victim count or formal bank breach notice at catalog time
Technical writeup
Indexed July 3, 2026. Daily Post Nigeria reported that customers of Providus Bank—recently merged with Unity Bank as ProvidusUnity following a June 2026 Supreme Court clearance—publicly complained on social media about unauthorized transactions on their debit cards months after a March 2026 criminal-forum wave (actor ByteToBreach) that exposed data from Sterling Bank, Remita, and other Nigerian institutions. Multiple customers confirmed the card fraud reports to the outlet; bank spokesperson Dafe Ivwurie told Daily Post the bank would conduct an internal investigation and revert but neither confirmed nor denied a fresh data breach at reporting time. Nigeria’s NDPC opened investigations into the broader March wave in April 2026 but had not published outcomes when the ProvidusUnity card complaints surfaced. BreachHistory indexes recordsAffected 0 pending bank or NDPC attestation of scope.
Root cause
Customer-reported unauthorized card transactions months after March 2026 ByteToBreach forum leaks affecting Nigerian fintech institutions; bank spokesperson said internal investigation underway without confirming scope