VDe Vector

French bank Arkéa reports cyberattack involving fraudulent transactions

The bank says the attack is under control and customers have suffered no financial loss.

French bank Crédit Mutuel Arkéa has been hit by a cyberattack in which fraudulent transactions were carried out. The bank says the incident is under control and customers have not been financially affected; a reported loss figure has not yet been confirmed.

Crédit Mutuel Arkéa announced the attack on Wednesday. According to the bank, security teams detected the incident in time and certain transactions were temporarily suspended to prevent further fraud. The bank says normal services will resume once the final security checks have been completed.

The bank has not disclosed how the attackers gained access, nor who might be behind the attack. It therefore remains unclear whether this involved an attack on internal systems, misuse of access rights or another form of digital fraud.

The figure of $133 million, equivalent to approximately €118 million, was cited by independent blockchain researcher ZachXBT and reported by French media. Arkéa has not confirmed the amount. According to the bank, investigations are still under way into how much money was involved exactly, and some funds have been frozen.

The reported transactions are said to have been routed through several crypto exchanges. This makes the case relevant to the financial sector, because digital transactions can be moved rapidly between different platforms. At the same time, the available evidence does not yet show that the full amount cited was actually stolen from Arkéa.

Arkéa stresses that customers’ interests are fully protected. According to the bank, this means that retail and business customers will not bear the loss. It has not yet been disclosed whether the bank itself, insurers or other financial parties will ultimately absorb any losses.

The attack comes at a time when European companies are especially alert to digital attacks on operational systems. Recent incidents involving supermarket refrigeration systems and other vital facilities show that cybersecurity is not only about data theft. In Arkéa’s case, it is primarily the reliability of financial transactions that has been affected.

The key question is therefore not only how much money has disappeared, but also how the bank brought the incident under control and whether additional checks are needed. Until the technical cause, the scale of the fraud and those responsible have been established, the extent of the financial loss remains an unconfirmed estimate.

Respond to this article

← Back to the edition