Developing Cybersecurity

Crédit Mutuel Arkéa cyber heist

Crédit Mutuel Arkéa said attackers used an internal account reached through an unnamed supplier to move funds, with reports estimating the loss at more than $133 million. The bank has suspended some systems and says customer assets are safe.

Image from Illustration: French bank Crédit Mutuel Arkéa hit in reported $133m cyber heistIllustration

The story so far

Reports first appeared on November 2, and Crédit Mutuel Arkéa disclosed the incident on November 4. The French cooperative bank said a sophisticated cyberattack reached its network through an unnamed supplier or service provider platform. Attackers then used the bank's own internal account to make fraudulent transfers to other financial institutions. ZachXBT estimated the theft at more than $133 million, while the bank said the order of magnitude was accurate without confirming a final figure.

The bank said customer accounts were not accessed and customer assets were safe, though it suspended some transactions and systems. It also warned of phishing risk. Some converted cryptocurrency was frozen, and the bank said some funds were blocked. The group has 5.8 million clients, and reports put the amount at up to $133 million or more than €118 million.

Latest updates

3 updates · newest first
  1. 7 Nov
    New development

    French bank Crédit Mutuel Arkéa hit in reported $133m cyber heist

    French cooperative bank Crédit Mutuel Arkéa said a sophisticated cyberattack reached its network through a service provider's platform and used the bank's own account to make fraudulent transactions, with reports putting the amount at up to $133m. The bank suspended systems, said customer assets were unaffected, and warned of phishing risk. It disclosed the incident on November 4 after reports on November 2, and said some funds were blocked.

    BleepingComputer ↗
  2. 5 Nov
    New development

    Credit Mutuel Arkea hit as attackers move funds via provider

    French bank Crédit Mutuel Arkéa said attackers reached an internal account through an unnamed third party provider and moved funds to other financial institutions. The bank suspended some transactions and said customer assets were safe. The group has 5.8 million clients. CoinDesk reported $133 million, Le Télégramme reported more than €118 million, and the bank said the order of magnitude was accurate but did not confirm a final figure.

    CSO Online ↗Cybernews ↗
  3. 4 Nov
    New development

    French bank confirms cyber heist estimated at $133 million

    Crédit Mutuel Arkéa confirmed a sophisticated cyberattack in which attackers used the bank's own account to make transfers after compromising an unnamed supplier. ZachXBT estimated the theft at more than $133 million, and the bank said it could validate the order of magnitude without confirming the figure. The bank said customer accounts were not accessed and that some converted cryptocurrency has been frozen.

    The Record ↗

Key facts

Crédit Mutuel Arkéa disclosed the incident on November 4 after reports on November 2.Reported by BleepingComputer
Attackers used the bank's own internal account to make fraudulent transfers.Reported by The Record, CSO Online, Cybernews and BleepingComputer
ZachXBT estimated the theft at more than $133 million.Reported by The Record
Reports put the amount at up to $133 million or more than €118 million.Reported by CSO Online, Cybernews and BleepingComputer
The bank said customer accounts were not accessed and customer assets were safe.Reported by The Record, CSO Online, Cybernews and BleepingComputer
The group has 5.8 million clients.Reported by CSO Online and Cybernews

What’s still unknown

Whether the bank will confirm a final loss figure
How the unnamed supplier or service provider was compromised
Whether all moved funds or cryptocurrency will be recovered

All sources

4 articles

In the daily editions

Related developing stories

Follow this story by email

Get one email when there’s a new update, no more than one a day.