Crédit Mutuel Arkéa confirms cyberattack as fraud total unclear
Crédit Mutuel Arkéa has confirmed a cyberattack that allowed fraudulent transactions. The bank says it is contained, but the size of the diversion is still unknown.

Crédit Mutuel Arkéa confirmed on Wednesday 4 November that it suffered a cyberattack that enabled "fraudulent operations". The Brittany-based banking group, parent company of Fortuneo, says the incident is now "under control". Some services, including transfers, are still unavailable to customers.
A disputed estimate
The confirmation follows revelations by ZachXBT, an investigator specialising in blockchain transactions. He put the alleged diversion at more than 133 million dollars, roughly 118 million euros. Arkéa has not confirmed that figure and insists the incident has "no financial consequence" for its customers.
The path of the money is still being pieced together. According to information from Grégory Raymond, traditional currency was allegedly diverted and then converted into cryptocurrencies through intermediary accounts. Blockchain analytics firm Bitquery says it traced 108.8 million dollars in USDC leaving Kraken, Crypto.com and OKX. Those flows, however, do not by themselves establish the final loss for Arkéa.
What remains unanswered
The bank has yet to explain how the attack worked, how much money, if any, has been recovered, and when all services will be fully restored. Claiming the incident is contained leaves open both its cost and its operational impact.
For customers, the practical issue is access: transfers remain blocked even though the bank says their funds are not affected. For the wider sector, the case shows how quickly stolen traditional funds can be routed through crypto platforms, and why investigators tracking on-chain movements often surface such incidents before the institutions concerned.
Apps worth a look
Tap the right tiles, add them up, hit the target. Easy to learn, hard to master. Free, for all ages.
Talk to an AI conversation partner; every sentence comes back corrected and explained in your language. 9 languages, A1 to C2.
Open EDIFACT and X12 messages, see every segment explained, convert to JSON/XML, export PDF and Excel. Runs locally, no upload.
Pick who it is for, the occasion and their personality. The search engine reads product descriptions from local shops and ranks what fits. Free, no sign-up.
More from this day
See all →
Singapore's PDG secures $1.3 billion for Johor data hub

SK hynix's $45 Billion New York Chip Plans Hit Export Snag
EIC Fund's 10 Largest Investments of 2026 So Far Revealed

IFC Backs 15 African Agritechs and Links Them to Banks
More in: Security
See all →
South Korea to Add Cybersecurity to Top-Tier Hospital Ratings

Google Cuts Off Videostrong Over Backdoor in 1.3M Android Devices

Binance Record Theft: Fake Job Interview Was the Entry Point
