Monitor this situation.
Unsubscribe anytime.
[SITUATION] · [ACTIVE] · [BUSINESS]
2 clusters · 48 sources · 3 days · First seen · Last updated
Crédit Mutuel Arkéa cyberattack and fund theft
Overview
French banking group Crédit Mutuel Arkéa confirmed it was the victim of a cyberattack involving fraudulent operations. While the bank has not officially confirmed the specific loss amount, blockchain investigator ZachXBT estimated the theft exceeded $133 million, an increase from an initial $106 million estimate after tracing additional withdrawals. ZachXBT noted that the final figure could be even higher due to unrecorded over-the-counter activity.
On-chain analysis indicated that the suspected attacker moved funds through multiple centralized exchanges, including Kraken, Crypto.com, and OKX. Reports suggested approximately $62.98 million in stablecoins was converted into ETH within a four-hour window, with funds reportedly routed through instant exchanges and cross-chain bridges before being converted into Monero to obscure the trail. Bitquery reported that this conversion involved approximately 27,553 Ether.
The bank stated the incident is under control and emphasized that customers will face no financial consequences, as their interests remain protected. The attackers allegedly used the bank’s own accounts to facilitate transfers rather than accessing individual customer accounts. As a precaution, the bank temporarily suspended certain transactions and notified relevant authorities. Kraken has restricted accounts linked to the suspected theft and is cooperating with law enforcement.
Reports suggest the fraudulent transactions may be estimated at least 150 million euros. The breach reportedly targeted the bank’s online entity, Fortuneo, rather than individual client accounts. Experts suggest the attackers may have issued transfer orders from Fortuneo accounts to send money to global recipients. ZachXBT noted that the observed laundering patterns do not match those typically associated with North Korea’s Lazarus Group.
Entities
Crédit Mutuel Arkéa · ZachXBT · France · Fortuneo · Kraken
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 6 SOURCES] The stolen amount is estimated between 118 million and 150 million euros. lat.sputnikportal.rs · biz.heraldcorp.com · elnuevodiario.com.do · anlatilaninotesi.com.tr · davfi.fr · +1 more
- [● 3 SOURCES] The stolen amount is estimated to be between 100 million and 133 million euros. biznes.interia.pl · news.cube-soft.jp · www.rmf24.pl
- [● 15 SOURCES] Crédit Mutuel Arkéa was the victim of a cyberattack. lat.sputnikportal.rs · biz.heraldcorp.com · elnuevodiario.com.do · kriptotarca.hu · www.criptovaluta.it · +10 more
- [● 13 SOURCES] The theft involved withdrawals from multiple centralized exchanges. cryptocompass.com · btcwires.com · coindoo.com · coinpedia.org · decrypt.co · +8 more
- [● 12 SOURCES] The attacker converted approximately $62.98 million in stablecoins into 27,553 ETH. cryptocompass.com · btcwires.com · coindoo.com · coinpedia.org · cointelegraph.com · +7 more
- [● 11 SOURCES] ZachXBT estimated the suspected crypto theft from an unidentified EU entity has risen to more than $133 million. cryptocompass.com · cointelegraph.com · ambcrypto.com · coinedition.com · cryptobriefing.com · +6 more
- [● 11 SOURCES] The victim is an unidentified entity in the European Union. cryptocompass.com · btcwires.com · coindoo.com · en.bitcoinsistemi.com · coinpedia.org · +6 more
- [● 11 SOURCES] Client accounts were not affected by the attack. lat.sputnikportal.rs · biz.heraldcorp.com · elnuevodiario.com.do · kriptotarca.hu · mediakampung.com · +6 more
- [● 9 SOURCES] Crédit Mutuel Arkéa confirmed it was the victim of a cyberattack involving fraudulent operations. kriptotarca.hu · www.criptovaluta.it · newsbit.nl · www.bienpublic.com · www.economiematin.fr · +4 more
- [● 8 SOURCES] The bank temporarily suspended certain transactions as a precaution. lat.sputnikportal.rs · elnuevodiario.com.do · kriptotarca.hu · www.criptovaluta.it · newsbit.nl · +3 more
- [● 7 SOURCES] The attacker used Monero (XMR) to help obscure funds. cryptocompass.com · en.bitcoinsistemi.com · coinpedia.org · decrypt.co · logos-pres.md · +2 more
Timeline
-
[TECHNOLOGY] 6 sourcesCrédit Mutuel Arkéa hit by cyberattack involving significant fund theft
French bank Crédit Mutuel Arkéa suffered a cyberattack involving the theft of up to 133 million euros, allegedly laundered via cryptocurrency. Separate attacks also targeted French blood bank cooling systems.
-
[BUSINESS] 42 sourcesCrédit Mutuel Arkéa confirms cyberattack following suspected $133M theft
French banking group Crédit Mutuel Arkéa confirmed a cyberattack involving fraudulent transactions. Estimates suggest over $133 million in crypto assets were stolen, though the bank says clients are unaffected.
Sources
ambcrypto.com · anlatilaninotesi.com.tr · bienpublic.com · bitcoinke.io · biz.heraldcorp.com · biznes.interia.pl · blockonomi.com · btcwires.com · classics.itmedia.co.jp · coindoo.com · coinedition.com · coinpedia.org · cointelegraph.com · criptovaluta.it · cryptoast.fr · cryptobreaking.com · cryptobriefing.com · davfi.fr · decrypt.co · economiematin.fr · elnuevodiario.com.do · en.bitcoinsistemi.com · financefeeds.com · grenade.tw · insurancejournal.com · kriptotarca.hu · kulturegeek.fr · lat.sputnikportal.rs · ledauphine.com · linternaute.com · logos-pres.md · macommune.info · mediakampung.com · moneyvox.fr · news.bitcoin.com · news.cube-soft.jp · newsbit.nl · nextplz.fr · notretemps.com · rande-academy.cz · realtid.se · rmf24.pl · silicon.fr · sondakika.com · telegrafi.com · thelocal.fr · vosgesmatin.fr · www1.pluska.sk
This summary has been updated 3 times: see revision history