Crédit Mutuel Arkéa responds to theft incident: scale of losses is accurate, attack did not enter through Fortuneo

November 5 — French bank Crédit Mutuel Arkéa has issued a statement disclosing details of thefund theft previously exposed by ZachXBT. According to the statement, attackers used the bank's own accounts to transfer funds to other banks, and may subsequently have converted the funds into cryptocurrency through specialized platforms; the funds did not pass through the customer accounts of its federation or its subsidiaries. The bank stressed that the incident had no impact on customer assets and that security measures were activated immediately upon discovery.

Arkéa said the attack did not enter through its online bank Fortuneo, but instead directly breached the bank's systems via the platform of a service provider. The incident is now under control, and most operations had resumed by that morning. The bank did not confirm reports that €1.18 million (about $133 million) was stolen, saying only that the scale is accurate; some of the funds have been frozen and other recovery efforts are ongoing, and the amount involved will not affect the group's financial soundness.