Crédit Mutuel Arkéa Hit by Cyberattack That Diverted Over €100 Million

Overview

• The bank disclosed on Wednesday that a sophisticated cyberattack allowed fraudulent transactions that diverted well over €100 million and that the incident is now contained.
• Media and independent blockchain trackers have estimated the amount taken at roughly €118 million to €150 million while Arkéa has validated the order of magnitude but not a precise figure.
• Arkéa says attackers used the group’s own accounts accessed via a service provider rather than customer accounts, and that stolen sums were converted into cryptocurrency on specialised exchanges.
• As a precaution the bank temporarily suspended some transactions and disrupted customer services while security checks ran; it says some funds have been blocked on crypto platforms and recovery actions are under way.
• The Parquet de Paris has opened a criminal investigation assigned to the Office anticybercriminalité, and the case highlights growing third‑party supply‑chain risk, cross‑border crypto‑recovery challenges, and the rising role of on‑chain investigators.