French Bank Crédit Mutuel Arkéa Hits Cyberattack Involving Fraudulent Transfers

French banking group Crédit Mutuel Arkéa has suffered a cyberattack that enabled fraudulent financial transfers across its systems. The Brittany-headquartered institution announced on Wednesday that its security teams had brought the incident under control and guaranteed that affected clients would not sustain any direct financial losses as a result of the breach.

Following the detection of the intrusion, the bank’s management enacted emergency measures, including the temporary suspension of specific transaction processing channels. According to official statements from Crédit Mutuel Arkéa, these operational holds were introduced to safeguard internal systems and block potential secondary fraudulent movements. The bank added that regular operations would resume once technical checks and updated security protocols were fully implemented.

While Crédit Mutuel Arkéa has not publicly disclosed the exact extent of the financial exposure, French regional newspaper Le Télégramme reported that approximately 133 million dollars, equivalent to 118 million euros, had been illicitly transferred during the cyberattack. In response to inquiries from the newspaper Le Parisien, the financial institution indicated that a portion of the targeted funds had been successfully frozen, while forensic teams continue to evaluate the net financial damage.

The security breach was initially brought to light by ZachXBT, an independent investigator specialising in blockchain and cryptocurrency tracking. According to information reported by news agency Agence France-Presse, the researcher identified that the diverted funds were systematically routed through multiple customer accounts across various cryptocurrency trading platforms to obfuscate the transaction trail.

Crédit Mutuel Arkéa has refrained from sharing technical details regarding the specific attack vector used by the perpetrators or the identity of the actors behind the breach. Bank officials confirmed that forensic reviews are ongoing alongside efforts to restore full operational capability across all suspended financial services.

Written by Freya Stensrud freya.stensrud@alpineweekly.com