Threat Intelligence · Incident Response
French bank Credit Mutuel Arkea hit by €100m cyber theft
Credit Mutuel Arkea says hackers stole around €100 million by making fraudulent transfers from the bank’s own accounts. No customer funds were affected, and authorities are investigating.
Ross Grant2 min read
The short version
Hackers stole about €100 million from the French bank Credit Mutuel Arkea by making fake transfers from the bank’s own accounts. No customer money was taken. The stolen funds were moved into cryptocurrency, making them harder to recover. Police in Paris are investigating the case.
By the numbers
- €100 millionamount stolen in fraudulent transfersFrance 24
- €230 millionbank’s net profit in the first half of the yearFrance 24
What happened?
Credit Mutuel Arkea, a French regional bank, announced it had suffered a cyberattack resulting in fraudulent transfers of around €100 million from its own accounts. The bank said no customer funds were affected. The attackers converted the stolen money into cryptocurrency. French authorities have launched an investigation.
What was taken
Credit Mutuel Arkea, a French regional bank, reported that hackers stole around €100 million (about $112 million) by making fraudulent transfers from the bank’s own accounts. The attackers did not access or steal money from customer accounts. Instead, they targeted the bank’s internal funds, moving them to other banks before converting the money into cryptocurrency on specialised platforms. Some of the stolen funds have been blocked, and efforts are ongoing to recover more.
How the attack worked
The bank said the attack was sophisticated and came from outside the organisation. Hackers gained access to an Arkea account and used it to initiate transfers to other banks. The bank has ruled out human error as a cause. However, it has not shared details on the specific techniques used, such as whether malware or phishing was involved. The attackers quickly moved the stolen money through multiple cryptocurrency exchange accounts, making it harder to trace and recover.
The response
Credit Mutuel Arkea stated that the incident has been contained. The bank is working to recover the stolen funds and has blocked a portion already. It also emphasised that the losses do not threaten the financial stability of the group, which reported a net profit of €230 million in the first half of the year. The Paris public prosecutor’s office has opened an official investigation, describing the case as an “attack on an automated data processing system by an organised group.”
Who is behind it
No one has said who carried out the attack. The bank has not named any suspects or groups, and the investigation is ongoing. Independent blockchain investigator ZachXBT first revealed the fraud on social media, tracking the movement of funds through various crypto exchanges.
What you should do
For banks and financial institutions, this case highlights the need for strong monitoring of internal accounts and rapid detection of unusual transfers. Regular reviews of access controls and transaction monitoring systems can help spot and stop similar attacks. Individuals are not directly affected, but the story is a reminder that even large financial institutions can be targeted by sophisticated cybercriminals.
Claimed vs confirmed
- Denied
Hackers stole $133 million as reported by Le Telegramme.
The bank would not confirm the $133 million figure but confirmed the scale of the losses was around €100 million.
Why it matters
This attack shows that even large banks can be targets for sophisticated cybercriminals. The use of cryptocurrency to launder stolen funds makes recovery difficult. It also highlights the importance of monitoring internal accounts, not just customer accounts, for suspicious activity.
Key points
- Hackers stole around €100 million from Credit Mutuel Arkea’s own accounts.
- No customer funds were affected by the attack.
- The stolen money was converted into cryptocurrency, complicating recovery.
- French authorities have launched an official investigation.
- The bank says its financial health is not at risk despite the loss.
Sources
France 24
Reference
