Crédit Mutuel Arkéa has confirmed it suffered a cyberattack that temporarily disrupted operations, with the French banking group now resuming services while assessing suspected losses valued at approximately $133 million. The institution acknowledged the security breach following public scrutiny of on-chain data but has not officially confirmed the exact figure of stolen funds.
Blockchain investigator ZachXBT played a pivotal role in bringing the incident to light by flagging suspicious outflows totaling roughly $133 million, prompting the bank to address the situation publicly The Block. While Arkéa declined to verify the precise amount taken, representatives validated the order of magnitude of the $133 million estimate, suggesting the actual losses fall within that range even as formal verification continues The Block.
According to statements from the financial institution, attackers gained access to the bank's systems through a service provider's platform, exploiting this entry point to compromise operational accounts Cointelegraph. The breach specifically involved the attackers using the bank's own account through the third-party provider's infrastructure, though technical details regarding the specific vulnerability and the identity of the service provider remain under investigation CryptoSlate.
Despite the significant sum involved in the suspected theft, Arkéa emphasized that customer funds were never at risk during the incident. The bank maintains that the compromised assets belonged to the institution itself rather than depositors, allowing transfers and standard banking operations to resume shortly after containment efforts concluded and systems were secured Cointelegraph.
The connection between the banking compromise and cryptocurrency remains partially ambiguous. While on-chain analysis revealed a separate $108.8 million USDC trail potentially linked to the incident, Arkéa has not definitively established whether the stolen funds were converted to digital assets or if traditional fiat channels were exclusively used CryptoSlate. This uncertainty leaves open questions regarding the ultimate destination of the funds and whether the attackers employed blockchain-based laundering techniques or maintained the proceeds in conventional financial instruments.
The incident represents a significant cybersecurity event for the French banking sector, highlighting persistent vulnerabilities in third-party service provider integrations that major financial institutions rely upon for critical operational infrastructure. Security analysts note that such supply-chain attacks continue to pose substantial risks to traditional banking institutions even as they strengthen their own internal defenses.