2026 Crédit Mutuel Arkéa — bank confirms a cyber heist through a service provider's platform; about $133M estimated, not confirmed by the bank; customer accounts not accessed, bank says
Data compromised
Funds. Blockchain investigator ZachXBT estimates about $133 million was stolen, based on exchange withdrawals and laundering transactions. The bank did not confirm the figure but said it could validate the order of magnitude. The final loss has not been determined. The bank says customer accounts were not accessed and customer assets will not be affected.
Technical writeup
Root cause
The bank confirmed a cyber attack in a press notice on the evening of Wednesday, November 4, 2026. It says the attackers reached the banking group through the platform of one of its service providers. It did not name the provider and disputed reports that its online bank Fortuneo was the entry point. The bank says crisis procedures were applied as soon as the attack was detected and that the incident is now under control. The intrusion date has not been disclosed.