Crédit Mutuel Arkéa Confirms Cyber-Attack After Reported $133m Heist

French banking group Crédit Mutuel Arkéa has confirmed it was targeted in a cyber-attack that facilitated fraudulent transactions from its own internal accounts. The incident, first brought to light by a blockchain investigator, saw attackers access the bank’s network via a third-party service provider’s platform.

The bank issued a statement on 4 November 2026, assuring customers that their funds were secure and unaffected by the incident. Attackers reportedly used Crédit Mutuel Arkéa’s own accounts to make transfers to other banking institutions, with indications that these funds were then converted into cryptocurrency via specialised platforms.

Blockchain investigator “ZachXBT” initially reported on 2 November 2026 that an unnamed “EU entity” had lost approximately $106 million from centralised exchange accounts, later updating the figure to an additional $27 million, bringing the estimated total to $133 million. ZachXBT traced aggressive swapping of USDC for ETH and conversions to Monero (XMR) across various chains and instant exchanges. The investigator explicitly ruled out the Lazarus Group, a notorious North Korean hacking outfit, from involvement.

Crédit Mutuel Arkéa has stated it is still too early to confirm the precise financial impact of the attack, as its teams are actively working to assess the full scope. The bank has confirmed that some of the involved funds have been frozen, and further actions are underway to recover the stolen assets. Despite the fraudulent activity, the group emphasised that the amounts involved are not significant enough to jeopardise its financial health or stability.

Upon identifying the attack, Crédit Mutuel Arkéa’s security teams immediately implemented measures to contain the incident and prevent any further unauthorised transactions. The bank also advised its customers to remain vigilant against potential phishing attempts in the wake of the publicised incident.