French bank Crédit Mutuel Arkéa suffered a $133M cyberattack via third-party provider; stolen funds may have been converted to cryptocurrency.
Macro & Markets ·
Crédit Mutuel Arkéa confirmed on November 4 a cyberattack affecting approximately $133 million. Intruders exploited a third-party service provider's platform to penetrate the bank's infrastructure, then leveraged the bank's own account to move funds across multiple financial institutions. The stolen capital may have been subsequently converted into cryptocurrency via dedicated exchanges.
The French banking group acknowledged reports of €118 million in losses but refrained from confirming the precise sum, stating only that the reported figure aligned with the correct order of magnitude. A portion of the compromised funds has been frozen, and the bank is pursuing recovery. The institution clarified that attackers did not breach its online subsidiary Fortuneo and that client holdings remained uncompromised, while characterizing the external incident as contained.
The exact recovery timeline and final theft amount remain unconfirmed, as does the identity of the third-party provider or any cryptocurrency platforms that may have received converted funds.