Credit Mutuel Arkea says hackers stole about €100 million
French prosecutors are investigating fraudulent transactions run through a bank account; the stolen funds were not cryptocurrency.
48 stories, newest first · one card per story
French prosecutors are investigating fraudulent transactions run through a bank account; the stolen funds were not cryptocurrency.
The bank ASN has restricted non-Google Android devices such as GrapheneOS on its systems.

Customers have shared bank usernames and passwords with agents, and several banks are steering tools toward read-only access.

The bank says customers remain liable for activity that follows from giving an AI agent their login.

Axios says the issue is customers authorizing agents, not a breach of bank systems or stolen credentials.

The bank says balances and funds are safe but gives no cause, data types, customer count or date.

SBI reviewed about 375,000 dark-web records and says balances are safe, with no confirmed core-system intrusion.

BreachForums user Siriusim posted SBI files, while the bank reported a much smaller official count.

Morgan Stanley, JPMorgan, Bank of America, Wells Fargo, and Citi are blocking AI agents from accounts via credentials.

Access reportedly begins when customers share banking passwords with assistants, and Axios described no confirmed widespread theft.

The October 21 filing says authenticity and the source remain unknown, and listed fields omit account numbers, passwords and Aadhaar.

Investigators confirmed 3,897 PII records after reviewing about 375,000 rows; passwords, PINs, and stolen funds were not reported.

Cloud Run, App Engine, GKE and Filestore saw errors; most customers recovered, with some cases still open.

Revolut says customer money and data are safe; Google was still investigating europe-west2.

Revolut listed 28 services as partly unavailable on October 20, while saying customer money and data stayed safe.

Open directories showed crypto, Linux and mobile tooling; cited breaches cover at least 68,000 people.
The linked page returned only a Cloudflare check, so duration and confirmed impact are not in the text.

The unverified post cites 375,000 CSV rows and 2,722 PDFs, not a confirmed unique-customer count.

Siriusim allegedly posted 375,000 CSV rows and 2,722 PDFs; SBI had not confirmed the claim.

Cited reporting says at least 68,000 people's data was exposed at seven or more financial institutions.

Itaú uses OpenAI models in ia.i and IARA to deliver generative AI banking for about 70 million Brazilian customers.

Star Labs analyzed YuanKong, an Android RAT using Accessibility and overlays to steal banking PINs and passwords.

An opportunistic attacker used stolen credentials and a misconfigured gateway to probe a European bank.

ANY.RUN says one bank's 74,086 sandbox runs had a 12.8% malicious yield, matching peers.
Today 1.5K readers · 2.4K views · 753 reads · all time 189K views