French Bank Crédit Mutuel Arkéa Confirms Cyberattack, Reports Suggest $133 Million Crypto Theft

French banking group Crédit Mutuel Arkéa has confirmed a cyberattack that enabled fraudulent transactions, following reports linking the institution to cryptocurrency theft exceeding $133 million. The bank stated that the incident is contained, operations are gradually resuming, and customer assets remain unaffected, though it has not confirmed the reported loss figure. The group notified regulatory and supervisory authorities after detecting the attack and temporarily suspended certain transactions to prevent further fraud while systems were checked and security measures were enhanced.

According to blockchain investigator ZachXBT, who linked Arkéa to suspicious cryptocurrency withdrawals, funds left exchange accounts as USDC and USDT before being moved through various cryptocurrency services. His analysis described conversions into Ethereum, transfers between blockchains, and exchanges into Monero, with the final estimated total potentially higher if additional over-the-counter trades are included. These figures remain investigative estimates, not losses verified by the bank.

In its official incident statement, Arkéa emphasized that the affected amounts are still being assessed and do not threaten its financial strength. Separate reporting confirms that the institution has not disclosed how attackers gained access or identified those responsible. This distinction is important, separating the confirmed banking incident from the wider claims about stolen cryptocurrency.

Public reporting has tentatively linked the fraud to Fortuneo, Arkéa’s online banking subsidiary. However, the available information does not establish the initial entry point, a specific software flaw, or whether stolen credentials were involved. Therefore, claims about the attackers’ identity should be treated with caution until more concrete evidence emerges.

Arkéa also issued a warning to its customers regarding potential phishing attempts that could follow the incident. Criminals may exploit news of banking problems to make fake security messages appear more credible. Cybersecurity News has previously documented similar payment scams using spoofed bank alerts, where callers trick victims into sending funds to attacker-controlled accounts.

The bank strongly advises customers never to share passwords, card details, or SMS verification codes. Anyone receiving a suspicious message should contact their bank adviser directly to verify its authenticity.

Arkéa's teams continue to assess the full consequences of the cyberattack and are working to strengthen their security infrastructure. Further updates are expected to be provided as new information becomes available and is verified.

This incident highlights the growing sophistication of financial cybercrime, particularly the exploitation of cryptocurrency channels for illicit fund movement, and underscores the importance of robust security measures and vigilant customer communication in the banking sector.