Technology and Scienceupdated 46m ago2 min read
Crédit Mutuel Arkéa Resumes Operations After Cyberattack Via Service Provider Platform
18outlets comparedWhere the coverage agrees
8 Western Mainstream5 Western Alternative3 Other2 Local WesternThis article is an automated aggregation of coverage from news outlets. Our editorials offer in-depth analysis curated by the NewsCord team.
Attack accessed Arkéa via a service provider platform enabling fraudulent transfers. Preliminary losses estimated around €100-€118 million, with figures varying across outlets.
Save coverage image
18 outlets told this the same way.
Bank attack, crypto trail
Crédit Mutuel Arkéa said nearly all operations resumed Wednesday after a cyberattack in which attackers accessed its systems through a service provider’s platform and then used the bank’s own account to carry out transactions to other banking actors. Crédit Mutuel Arkéa said the attackers “used Arkéa Crédit Mutuel’s own account to carry out transactions to other banking actors,” and the bank said the money was then converted into cryptocurrency via specialized platforms.
ZachXBT said he flagged more than $106 million in suspicious withdrawals on Monday and raised his estimate above $133 million on Tuesday after finding another $27 million, and he later identified Arkéa as the potential victim. Bitquery traced withdrawals from accounts at Kraken, Crypto.com and OKX before the victim was publicly identified, and Bitquery said the blockchain records alone could not establish a definitive connection to Arkéa’s banking accounts.
Bank denies Fortuneo
Crédit Mutuel Arkéa said the attackers did not use its online banking subsidiary Fortuneo as an entry point, and the bank said “The attackers went through the platform of one of our service providers and thus directly reached Crédit Mutuel Arkéa.” The bank also said it ruled out a first hypothesis widely circulated that Fortuneo served as the entry point, and it described the incident as “a sophisticated external attack.”
The Paris public prosecutor’s office said it opened an investigation after receiving a complaint from Crédit Mutuel Arkéa, and the investigation concerned an “intrusion into a system for the automated processing of data by an organized gang.” Crédit Mutuel Arkéa told customers that no deposits were affected and that the incident “has no financial consequences for them,” while the bank said some funds had been frozen and further recovery efforts were underway.
What happens next
Crédit Mutuel Arkéa said part of the funds in question could be blocked and other actions were ongoing to recover them, while the bank said it did not confirm the reported $133 million figure and could only validate the rough order of magnitude. The bank said it temporarily suspended certain transactions as a precaution to secure operations and prevent any new fraudulent movement, and it said nearly all operations were able to resume in the morning after checks and strengthened security measures.
Crédit Mutuel Arkéa warned customers that “phishing attempts are possible,” and the bank urged vigilance because attackers could exploit the incident to extort confidential information. ZachXBT said the attack took place over multiple days and that he suspected the amount stolen was larger when accounting for OTC activity, while he also wrote that he was “NOT Lazarus Group” based on multiple laundering indicators.