Skip to content
NewA calmer, faster ZeroHour
StoryData breachhighExploited in the wild

Crédit Mutuel Arkéa Confirms $133M Cyber Heist via Supplier

8 sources · 8 articlesFirst reported Updated ()
What's new

November 9: Infosecurity Magazine reports ZachXBT identified activity November 2 and links funds to ether and Monero; bank denies Fortuneo entry point and human error.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Crédit Mutuel Arkéa confirms attackers stole up to $133 million from its accounts via a service provider; customer assets unaffected.

Crédit Mutuel Arkéa confirmed a cyberattack that enabled fraudulent transfers totaling around $133 million from the bank's own accounts through an unnamed third-party service provider platform. Customer accounts were not accessed and assets remain safe, though some transfers were delayed. The bank states the incident is contained, operations are resuming after temporary suspensions, and it has notified authorities while implementing security measures. Blockchain investigator ZachXBT tracked the funds as USDC and USDT stablecoins moving toward ether and partly to Monero.

Key facts
  • Attack accessed via unnamed third-party service provider platform
  • Fraudulent transfers of up to $133 million from bank's own accounts
  • Customer assets unaffected
  • Operations resuming after suspensions
  • Funds laundered as USDC and USDT stablecoins
  • No specific threat actor or vulnerability identified
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Nov 1, 2026ZachXBT flagged over $106 million in suspicious activity · Help Net Security
  2. Nov 3, 2026ZachXBT flagged additional $27 million · Help Net Security
  3. Nov 4, 2026Crédit Mutuel Arkéa confirms cyberattack via service provider · Cyber Security News
  4. Nov 9, 2026Infosecurity Magazine reports new details on ZachXBT tracking · Infosecurity Magazine

What each outlet adds

beyond the shared facts
  • Help Net SecurityZachXBT tracking of funds to ether and Monero; bank denies Fortuneo entry and only validates loss order of magnitude
  • BleepingComputerFunds laundered as USDC and USDT stablecoins; phishing risks increased
  • GBHackersSuspected loss exceeds $133 million; some funds frozen; recovery ongoing
  • CSO Online€118 million transferred; funds possibly converted to crypto
  • Infosecurity MagazineIncident identified November 2 by ZachXBT; bank assessing financial consequences and recovering funds
Vendors
Crédit Mutuel Arkéa
Products
banking networkbanking platformbanking systems
Victims
Crédit Mutuel Arkéa
Organizations
Fortuneo
Countries
France

Coverage

oldest first · one row per article · UTC
  1. · 5d ago Cyber Security NewsFirst report

    French bank Crédit Mutuel Arkéa confirms cyberattack amid $133 million theft reports

    Crédit Mutuel Arkéa confirms a cyberattack enabling fraudulent transactions but has not confirmed reported loss figures.

  2. · 4d ago The Record

    French bank confirms cyber heist, hackers suspected to have stolen $133 million

    Crédit Mutuel Arkéa confirms attackers stole an estimated $133 million through a supplier platform, but says the sum is not a threat to its solvency.

  3. · 4d ago GBHackers

    French Bank Crédit Mutuel Arkéa Hit by Cyberattack

    Bank contained cyberattack but suspects over $133 million stolen through unauthorized transfers to cryptocurrency.

  4. · 3d ago CSO Online

    French banking group hit by supply chain cyberattack

    Crédit Mutuel Arkéa lost up to €118 million after attackers accessed internal accounts via a third-party provider and transferred funds, possibly to cryptocurrency.

  5. · 2d ago BleepingComputer

    Hackers steal $133 million from French bank via service provider

    Crédit Mutuel Arkéa confirms fraudulent transfers up to 133 million euros through service provider; customer assets unaffected.

  6. · 1d ago Security Affairs

    Hackers Raid French Bank Crédit Mutuel Arkéa

    Attackers exploited a third-party provider to withdraw up to $133 million from the bank's accounts.

  7. · 6h ago Help Net Security

    Crédit Mutuel Arkéa hit by roughly $133 million fraudulent transfers

    The bank confirms only the scale; ZachXBT tracked stablecoins moved toward ether and Monero, and a Fortuneo entry is disputed.

  8. · 5h ago Infosecurity Magazine

    Crédit Mutuel Arkéa Targeted in Reported $133m Heist

    Hackers stole $133m from Crédit Mutuel Arkéa using a service provider platform, converting to cryptocurrency; no customer accounts affected.