Crédit Mutuel Arkéa confirmed that a cyberattack enabled fraudulent transactions using the French banking group’s own account. The bank said customer assets were unaffected and the incident was contained, with operations resuming gradually after some transfers were temporarily suspended. The disclosure came in a November 4 statement.
In a subsequent update, Arkéa said attackers used its own account to send transactions to other banks, potentially allowing the funds to be converted into cryptocurrency through specialized platforms. The bank said customer accounts at its federations and subsidiaries were not used and that Fortuneo was not the entry point. It attributed the intrusion to an external attack through a third-party service provider.
The amount affected remains under assessment. Reuters reported that the bank disputed a $133 million loss figure circulating in crypto media, saying the amount was lower and that it was too early to provide a final total. Arkéa said part of the funds had been blocked and recovery efforts were continuing.
The bank said it notified the relevant authorities and strengthened security measures before gradually resuming operations. Reuters reported that Crédit Mutuel Arkéa serves 5.8 million clients and holds €211.5 billion in assets.



