Reuters reported on November 5 that Crédit Mutuel Arkéa said about €100 million was missing after attackers used a bank-owned account for fraudulent transfers.
In its official follow-up, the French lender said it could confirm only the order of magnitude, that some funds had been blocked, and that the final amount remained under assessment. The bank said customer accounts and assets were unaffected.
The attackers used Arkéa’s own account to send transactions to other banks, potentially allowing the funds to be converted into cryptocurrency through specialized platforms. The bank said the attackers reached it through a third-party service provider’s platform, not through its online banking subsidiary Fortuneo, and declined to identify the provider.
Arkéa said it had informed the European Central Bank, French banking supervisors and prosecutors. The Paris prosecutor’s cybercrime unit opened an investigation after receiving the bank’s complaint. Some transfers were temporarily suspended, causing delays, while operations resumed gradually.
The update adds a loss estimate to the bank’s earlier confirmation of fraudulent transfers; the amount ultimately recovered remains unknown.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
