The French cooperative banking group Credit Mutuel Arkea has confirmed it was the target of a sophisticated cyberattack that resulted in unauthorized financial transactions. While the bank has not officially verified the exact figure, independent investigators have estimated the total loss at approximately 118 million euros, or 133 million dollars. The incident, which came to light following warnings from blockchain security researchers on November 2, involved the large-scale movement of funds into USDC and USDT stablecoins.
Credit Mutuel Arkea officially disclosed the breach on November 4, stating that the situation is now under control and that internal operations are in the process of returning to normal. The bank emphasized that the breach did not impact the assets of its 5.8 million members. The primary consequence for customers was a temporary delay in the execution of certain transfer transactions. The institution has since urged its clientele to exercise heightened caution regarding phishing attempts, advising them to verify any unsolicited communications by contacting their bank advisors directly.
According to the bank, the attackers gained entry to its internal network by compromising the platform of an external service provider. Credit Mutuel Arkea has explicitly ruled out its subsidiary, Fortuneo, as the point of entry. Once inside the network, the perpetrators utilized the bank’s own internal accounts to initiate unauthorized transfers to other financial institutions, rather than targeting individual customer accounts. The bank characterized the event as a sophisticated operation and dismissed the possibility that human error within its own organization facilitated the breach.
The timeline of the incident suggests the unauthorized withdrawals began around November 1. Blockchain investigators noted that the lack of immediate public disclosure by the bank provided the attackers with a window of opportunity to launder approximately 30 million dollars before law enforcement agencies could intervene to freeze the assets. While the bank has declined to confirm the specific 133 million dollar figure cited by external observers, it has acknowledged that the financial impact is significant and that it has successfully managed to block some of the stolen funds.
Credit Mutuel Arkea is currently collaborating with police and judicial authorities to conduct a forensic investigation into the origin and specific methods used by the attackers. The bank maintains that its primary focus remains on securing its infrastructure and ensuring the integrity of its transaction systems. As the investigation proceeds, the bank continues to monitor for potential follow-up threats, such as social engineering campaigns that may attempt to exploit the publicity surrounding the heist.
No further details regarding the identity of the service provider or the specific technical vulnerabilities exploited during the intrusion have been released. The bank has stated that it will continue to provide updates as the investigation into the modus operandi of the attackers progresses. For now, the institution maintains that all customer accounts remain secure and that the incident is effectively contained.
