Crédit Mutuel Arkéa Confirms Cyber Attack with $133 Million Theft
A sophisticated cyber heist at Crédit Mutuel Arkéa has led to an estimated loss of $133 million, though customer accounts remain secure.
Crédit Mutuel Arkéa confirmed a cyber attack resulting in a theft of approximately $133 million.
The bank stated that customer accounts were not compromised during the incident.
Investigations are ongoing to determine the attack's origin and methods.
Crédit Mutuel Arkéa, a prominent French banking institution, has confirmed that it fell victim to a sophisticated cyber attack, with hackers reportedly stealing around $133 million. The bank disclosed that the attackers managed to execute unauthorized transfers by exploiting vulnerabilities in a third-party supplier's system, although it emphasized that customer accounts were not accessed during the breach.
The incident was first highlighted by ZachXBT, an American blockchain investigator, who identified Arkéa as the target of the attack. According to ZachXBT, the hackers conducted operations over several days, withdrawing substantial amounts from cryptocurrency exchanges and attempting to launder the stolen assets. While Arkéa did not confirm the exact amount stolen, it acknowledged the scale of the theft, stating that necessary crisis measures were implemented immediately upon detection of the attack.
In its official statement, Arkéa refuted claims from local media suggesting that the attack originated through Fortuneo, its online banking subsidiary. Instead, the bank clarified that the attackers accessed its systems via a service provider's platform, characterizing the hack as sophisticated and not due to human error. The bank's statement detailed that the attackers utilized its own accounts to facilitate transactions to other financial institutions, which may have enabled them to convert the stolen funds into cryptocurrency.
Some of the assets that were converted have reportedly been frozen, and the bank is actively working to recover the remaining funds. Although the total loss has not been definitively established, Arkéa reassured stakeholders that the incident would not jeopardize its financial stability, noting that its total assets exceed £237 billion according to the latest annual report.
The bank's security systems were credited for quickly identifying the suspicious activities and implementing containment measures. Arkéa is currently collaborating with judicial and law enforcement authorities to investigate the attack's origins and operational methods, aiming to enhance its defenses against future threats.
