TLDR
- Crédit Mutuel Arkéa says attackers reached it through a service provider’s platform, not through Fortuneo.
- The hackers used the bank’s own account to send money to other banks, and it was then likely converted into crypto.
- The bank says customer assets were not affected and the attack has been contained.
- ZachXBT estimates losses at more than $133 million, and the bank validated only the order of magnitude.
- Part of the stolen funds has been blocked, and recovery efforts are ongoing.
French cooperative bank Crédit Mutuel Arkéa says hackers reached its systems through the platform of one of its service providers. The bank shared this detail in a question-and-answer statement released in Brest on November 4 at 5:30 p.m.
The statement followed an earlier release at 1:00 p.m. the same day. It answered questions from the press about how the attack happened and who was affected.
The bank said the attackers used its own account to send money to other banks. That money may then have been converted into cryptocurrency through specialized platforms.
Bank Denies Fortuneo Was the Entry Point
Some press reports had said the attackers got in through Fortuneo, the group’s online bank. Crédit Mutuel Arkéa rejected that claim. “Despite what has been reported, there was no ‘entry’ through Fortuneo,” the bank said.
Instead, the bank said the attackers went through a service provider’s platform and reached Crédit Mutuel Arkéa directly. It did not name the provider.
The bank also said human error inside the company did not cause the attack. It described the incident as “a sophisticated attack from outside” that has now been contained.
According to the bank, the attackers did not use the accounts of customers at its federations or subsidiaries. It said the incident has no financial consequences for customers and only delayed certain transfers.
As a precaution, the bank temporarily suspended some transactions. Almost all operations resumed during the morning after checks were completed and stronger security measures were put in place.
The group said it informed the relevant authorities and supervisory bodies. Its teams are working with judicial and law enforcement authorities to find the origin of the attack and how it was carried out.
The bank also warned customers about phishing. It said attacks like this often bring a rise in phishing attempts aimed at stealing personal data, so customers should stay alert.
🚨FRENCH BANK ATTACK CONFIRMED: FORTUNEO HIT, $133M+ DRAINED INTO CRYPTO!
New reporting confirms that @fortuneo, the online arm of Crédit Mutuel Arkéa, was targeted.
Attackers issued transfers and moved the funds into crypto exchange accounts opened with forged identities.… https://t.co/hwl6fHABoE pic.twitter.com/YemTytogpM
— Crypto Banter (@crypto_banter) November 4, 2026
ZachXBT Traces Funds Across Chains
Onchain investigator ZachXBT first flagged the exploit publicly on November 2. He estimated losses at more than $133 million and said the number could grow.
He explained that the attack took place over several days. It may also have included extra over-the-counter trades that could push the total higher.
According to ZachXBT, the attacker swapped USDC for ETH and moved assets through instant exchanges such as WellWallet and Kyrrex. Funds were also converted into Monero (XMR) through Wagyu and bridged across multiple blockchains.
ZachXBT said he has a “high degree of confidence” that North Korea’s Lazarus Group was not behind the attack. The bank has not named any suspects.
Crédit Mutuel Arkéa has 12,073 employees and more than 5.8 million members and customers. It reports total assets of €211.5 billion ($238.1 billion).
When asked whether 118 million euros ($133 million) was stolen, the bank said it would not confirm the figure. It said it could only validate the order of magnitude.
The bank said part of the funds has been blocked and other recovery actions are underway. It added that it is too early to share a final amount, but the losses are “in no way of a nature to undermine the financial strength and soundness” of the group.
