Crédit Mutuel Arkéa Confirms Cyberattack Amid $133 Million Crypto Theft Reports

Highlights:

• French bank Crédit Mutuel Arkéa confirms hackers accessed its systems through an outside service provider.
• The bank addresses reports of a $133 million theft but has not confirmed the exact losses.
• Crédit Mutuel Arkéa restores most banking services and assures customers that their funds remain safe.

French bank Crédit Mutuel Arkéa says hackers used its own account to send money to other banks after gaining access through an outside service provider. The attackers may have then converted the funds into cryptocurrency. The bank has not confirmed reports that the cyberattack involved €118 million ($133 million).

In a November 4 official statement, Crédit Mutuel Arkéa explained how the attackers moved the money and what happened after its security team spotted the activity. The bank said the breach did not affect customer funds, although it delayed some transfers.

French Bank Crédit Mutuel Arkéa Details $133M Cyberattack via Third-Party Provider, Funds May Have Been Converted Into Crypto

French banking group Crédit Mutuel Arkéa disclosed further details on November 4 about a cyberattack reportedly involving approximately $133 million.… pic.twitter.com/eTJXd5fb5p

— Wu Blockchain (@WuBlockchain) November 5, 2026

Hackers Entered Crédit Mutuel Arkéa Through a Service Provider

According to the bank, the hackers reached its systems through a platform run by one of its service providers. They then used Crédit Mutuel Arkéa’s own account to send money to other banking institutions.

From there, the attackers may have used specialized platforms to convert the money into cryptocurrency. The bank has not confirmed whether the conversion happened. It also did not name a crypto exchange or identify any destination wallets. Crédit Mutuel Arkéa also addressed reports that the attackers entered through Fortuneo, its online banking subsidiary. The bank denied those reports and said the breach came through the service provider’s platform.

The group rejected suggestions that an employee’s mistake caused the attack. It described the incident as a sophisticated external operation. Investigators are still working to establish how the hackers gained access.

Bank Addresses Reports of $133 Million in Stolen Funds

The bank also responded to questions about reports that hackers stole €118 million, or roughly $133 million. It did not confirm that amount but said the figure was in the right general range. Its teams are still reviewing the financial impact and trying to recover the money. The lender said it had already blocked part of the affected funds. However, it did not say how much it had stopped or how much remains missing.

Earlier, blockchain investigator ZachXBT reported more than $133 million in suspicious crypto withdrawals linked to a possible attack on an unidentified European financial institution. His November 3 findings raised questions about the victim’s identity and the movement of the funds. However, Crédit Mutuel Arkéa has not confirmed a connection to his investigation.

Crédit Mutuel Arkéa has not yet given a final loss figure. It also said the incident would not threaten its financial stability. The group has not identified the attackers. Its teams are working with law enforcement and judicial authorities to determine how the breach took place.

Crédit Mutuel Arkéa Restores Services and Warns Customers

The bank said that it rapidly flagged the suspicious activity through the security systems. It has then put into effect emergency measures and temporarily halted some transactions to prevent further fraudulent transfers. The group made most of its operations again on the morning of November 4 after having checked its systems and put in place more robust security measures. The bank said no customers lost money, although some transfers were delayed.

In an earlier November 4 announcement, Crédit Mutuel Arkéa urged customers to watch out for phishing messages. Such messages can trick people into sharing passwords, bank card details, or verification codes. The bank said it issued the warning as a precaution. It did not say that the attack had exposed customer information. Crédit Mutuel Arkéa serves more than 5.8 million members and customers. The bank says it will share further updates as its teams continue assessing the losses and strengthening security.