Crédit Mutuel Arkéa Restores Operations After Cyberattack

The French banking group Crédit Mutuel Arkéa announced on November 4 that it had restored almost all operations following a cyberattack that allowed perpetrators to make transfers from the bank's own account. According to the group, client funds were not affected. Some transfers were executed with delays, and the extent of the financial damage remains unknown.

The attackers gained access to the bank's systems through a third-party service provider platform. The online bank Fortuneo, part of the group, was not the point of entry. After gaining access, the attackers sent money to accounts in other financial institutions, where it could have been converted into cryptocurrency. The exact amount of funds exchanged for digital assets has not been determined.

After detecting suspicious operations, the group temporarily restricted some transfers, notified the competent authorities, and strengthened security measures. By the morning of November 4, almost all operations had resumed following additional checks. The bank described the incident as localized and emphasized that client accounts were not used to withdraw money.

Damage Assessment and Partial Fund Blockage

The first signs of possible theft were identified during an analysis of withdrawals from cryptocurrency platforms Kraken, Crypto.com, and OKX. On November 2, the volume of suspicious operations was estimated at more than $106 million. The next day, the estimate rose to more than $133 million after another $27 million was discovered. On November 4, the investigation pointed to Crédit Mutuel Arkéa as a possible affected organization.

The bank confirmed the cyberattack but refused to confirm the exact amount of $133 million, acknowledging only a comparable order of magnitude. The final financial outcome will also depend on the funds recovered. According to the group, some assets have already been blocked, and work to recover the rest is ongoing.

Platforms Kraken and Crypto.com also reported restricting certain accounts or blocking funds related to suspicious operations. Both companies stated that the security of their own platforms was not compromised. Crédit Mutuel Arkéa believes that the consequences of the attack do not threaten the group's financial stability, but the final size of the losses and the details of the theft mechanism have yet to be determined.