Crédit Mutuel Arkéa: Attack entered via service provider platform, losses still being assessed

On November 5, according to an official announcement from Crédit Mutuel Arkéa, the bank clarified that the prior cyberattack did not gain access through its online banking arm, Fortuneo. Attackers directly accessed the bank's system via a service provider's platform, then used the bank's own accounts to transfer funds to other banks, after which the money may have been converted into cryptocurrency through specialized platforms.

Regarding reports that €118 million ($133 million) was stolen, the bank stated it cannot confirm the exact amount but acknowledges the magnitude. Some of the involved funds have been frozen, while other recovery efforts are underway, and final financial losses remain under assessment. The bank confirmed that customer assets are unaffected, the incident has been contained, and most business operations have been restored.