Crédit Mutuel Arkéa Investigates $133 Million Cyberattack

The bank confirmed that the attackers bypassed internal defenses by infiltrating an unnamed third-party platform. Rather than targeting individual client accounts, the perpetrators used the bank’s own internal systems to move funds to other financial institutions. Although the lender declined to verify the exact €118 million figure, it acknowledged the amount aligns with the scale of the incident. Some of the capital has been frozen, and the Paris public prosecutor’s office has launched an investigation into the organized digital breach.

Reports from blockchain investigator ZachXBT suggest that a portion of the stolen assets was funneled into stablecoins like USDC and USDT, as well as Ethereum and the privacy-focused asset Monero. The bank has not independently verified these specific movements but confirmed that investigators are tracing the destination of the funds. While operations have returned to normal, the lender cautioned its 5.8 million clients to remain vigilant against phishing attempts that often follow high-profile security lapses. Security teams are currently working with law enforcement to determine how the external provider’s credentials were compromised.