Crédit Mutuel Arkéa has resumed most of its operations after a cyberattack that targeted the bank’s own account. The disruption began earlier this week, with attackers gaining access through a service provider rather than the bank’s online subsidiary, Fortuneo. The breach allowed hackers to transfer funds to other financial institutions, potentially converting them into cryptocurrency.
The bank confirmed that customer funds were not affected, though some transfers were delayed due to security checks. Arkéa is still assessing the financial impact of the attack, which blockchain analytics firm Bitquery traced to withdrawals from exchanges like Kraken, Crypto.com, and OKX. Onchain investigator ZachXBT initially flagged over $106 million in suspicious withdrawals, later raising the estimate to more than $133 million.
Arkéa acknowledged the approximate scale of the theft but did not confirm the exact figures reported by ZachXBT. The bank stated that some funds had been frozen and that recovery efforts were ongoing. Kraken and Crypto.com previously restricted accounts linked to the suspected theft, maintaining that their platforms remained secure.