- Messages
- 4,016
- Likes
- 1,873
- Points
- 2,130
French cooperative bank Crédit Mutuel Arkéa reported an attack in which criminals stole approximately €118 million (US$133 million). Hackers penetrated the bank's network through an unnamed service provider's platform and used Arkéa's own account to transfer funds and convert them into cryptocurrency. The bank's clients' funds were not affected.
The first reports of the incident appeared on November 2, 2026, when renowned blockchain researcher ZachXBT reported a large unauthorized withdrawal that occurred the day before and affected several accounts on centralized crypto exchanges.
According to the researcher, the attackers may have stolen up to €118 million, withdrawing the funds in the stablecoins USDC and USDT. The researcher initially did not disclose the name of the organization affected. He emphasized that the lack of public information about the attack as of November 3 allowed the attackers to launder approximately $30 million, funds that could otherwise have been blocked by European law enforcement. Crédit Mutuel Arkéa representatives reported the hack on November 4. Due to the incident, the bank's specialists were forced to temporarily shut down part of its infrastructure, which led to delays in some transfers. However, the bank stated that the attack had already been stopped, the situation was under control, and systems were gradually returning to normal. The bank later clarified that the attackers gained direct access to Crédit Mutuel Arkéa's network through the platform of a service provider (not Fortuneo, it was noted). Moreover, after penetrating the network, the attackers used Arkéa's own account, not the accounts of its clients, to conduct transactions with other financial institutions and convert funds into cryptocurrency. The bank did not disclose the exact amount of damage but confirmed that it was approximately in line with ZachXBT's estimate. It was emphasized that some of the stolen funds were successfully blocked. Furthermore, the bank ruled out employee error and stated that it was the victim of a "complex cyberattack." Arkéa is currently investigating the incident with law enforcement agencies and is trying to determine how the attackers managed to penetrate the bank's infrastructure. Clients are specifically warned about the increased risk of phishing attacks and are advised not to disclose confidential information by phone or email, and to check any suspicious messages, contacting bank specialists directly if necessary. @xakep.ru
The first reports of the incident appeared on November 2, 2026, when renowned blockchain researcher ZachXBT reported a large unauthorized withdrawal that occurred the day before and affected several accounts on centralized crypto exchanges.
According to the researcher, the attackers may have stolen up to €118 million, withdrawing the funds in the stablecoins USDC and USDT. The researcher initially did not disclose the name of the organization affected. He emphasized that the lack of public information about the attack as of November 3 allowed the attackers to launder approximately $30 million, funds that could otherwise have been blocked by European law enforcement. Crédit Mutuel Arkéa representatives reported the hack on November 4. Due to the incident, the bank's specialists were forced to temporarily shut down part of its infrastructure, which led to delays in some transfers. However, the bank stated that the attack had already been stopped, the situation was under control, and systems were gradually returning to normal. The bank later clarified that the attackers gained direct access to Crédit Mutuel Arkéa's network through the platform of a service provider (not Fortuneo, it was noted). Moreover, after penetrating the network, the attackers used Arkéa's own account, not the accounts of its clients, to conduct transactions with other financial institutions and convert funds into cryptocurrency. The bank did not disclose the exact amount of damage but confirmed that it was approximately in line with ZachXBT's estimate. It was emphasized that some of the stolen funds were successfully blocked. Furthermore, the bank ruled out employee error and stated that it was the victim of a "complex cyberattack." Arkéa is currently investigating the incident with law enforcement agencies and is trying to determine how the attackers managed to penetrate the bank's infrastructure. Clients are specifically warned about the increased risk of phishing attacks and are advised not to disclose confidential information by phone or email, and to check any suspicious messages, contacting bank specialists directly if necessary. @xakep.ru