--- title: "Crédit Mutuel Arkéa breached via provider, up to €118 million at stake" description: "On 4 November, Crédit Mutuel Arkéa confirmed a cyberattack carried out through a service provider's platform, which may have enabled up to €118 million in fraudulent transactions. The bank says customer funds were not affected, but it is warning customers that the risk of phishing is now higher." canonical: https://inyourgeek.com/en/articles/2026-11-07-credit-mutuel-arkea-attaque-via-un-prestataire-jusqu-a type: article author: "Sébastien Soulier" publisher: "InYourGeek" language: en datePublished: 2026-11-07 dateModified: 2026-11-07 section: "Security" tags: ["banque", "cyberattaque", "cryptomonnaie", "hameconnage"] --- # Crédit Mutuel Arkéa breached via provider, up to €118 million at stake > On 4 November, Crédit Mutuel Arkéa confirmed a cyberattack carried out through a service provider's platform, which may have enabled up to €118 million in fraudulent transactions. The bank says customer funds were not affected, but it is warning customers that the risk of phishing is now higher. November 7, 2026 · Security · 3 min On 4 November 2026, Crédit Mutuel Arkéa confirmed that it had been the target of a cyberattack. According to [BleepingComputer](https://www.bleepingcomputer.com/news/security/hackers-pull-off-133-million-french-bank-heist-via-service-provider/), which published an overview of the case on 7 November, the intrusion may have enabled fraudulent transactions of up to €118 million, or $133 million, and led the bank to suspend some of its systems. For now, these details come from that single source and from the bank's statements as it reports them. ## An intrusion through a service provider's platform The cooperative banking group has more than 5.8 million member-shareholders and €211.5 billion in assets. In an FAQ, it explains that the attacker reached its network directly through the platform of a service provider. The bank has ruled out any involvement of Fortuneo. Once inside the network, the attacker did not go after customer accounts. Instead, they used Arkéa's own account to send transactions to other banks, then converted the funds into cryptocurrency. The bank rules out human error on its side and describes the attack as sophisticated. It is working with the judicial authorities and the police to establish exactly where the attack came from and how it was carried out. ## A figure the bank does not confirm The first reports appeared on 2 November, without naming the bank. ZachXBT, an investigator who specialises in blockchain fraud, described a large unauthorised withdrawal the day before from several accounts on centralised exchanges. According to him, up to €118 million may have been stolen and then withdrawn as USDC and USDT stablecoins. The same investigator estimated that the lack of public disclosure gave the attacker time to launder $30 million before 3 November. Without that delay, European law enforcement might have been able to freeze those funds. Asked about the €118 million figure, Crédit Mutuel Arkéa says it does not confirm it and only acknowledges the order of magnitude. It accepts that the amount is significant and says part of the funds has been blocked. BleepingComputer says it asked the bank for an update on the investigation but had received no reply by the time it published. ## No impact on customer funds, according to the bank In its statement of 4 November, the bank says the incident is now over and under control, and that its services are gradually returning to normal. It tells all of its customers, across all its federations and subsidiaries, that their funds have not been affected. According to the bank, the only consequence for them was a delay in processing some transfers. ## The remaining risk: phishing The bank warns of a higher risk of phishing following the incident. It asks customers to be wary of any contact they did not ask for and not to give out any sensitive information by phone or email. If you have any doubt about a message, the bank advises you to check it by calling your adviser directly. If you get a call or an email that mentions this attack and asks for your personal or banking details, this is exactly that situation: check it through that channel, even if it appears to come from the bank. The stolen money did not come from customer accounts. The scam attempts that often follow announcements like this one, however, go straight to customers. ## Sources - [Hackers pull off $133 million French bank heist via service provider](https://www.bleepingcomputer.com/news/security/hackers-pull-off-133-million-french-bank-heist-via-service-provider/) — bleepingcomputer.com _Article written with AI assistance from the cited sources, reviewed and approved by a human before publication._ --- Equivalent HTML page : https://inyourgeek.com/en/articles/2026-11-07-credit-mutuel-arkea-attaque-via-un-prestataire-jusqu-a Published by InYourGeek — https://inyourgeek.com/en/a-propos Method and safeguards : https://inyourgeek.com/en/methode All articles : https://inyourgeek.com/en/archives