UPDATE: Crédit Mutuel Arkéa confirms cyberattack, says retail funds safe
CIE News ·
Update to UPDATE: ZachXBT names Crédit Mutuel Arkéa in $133M crypto theft
Confirmed by 2 independent news outlets.
Crédit Mutuel Arkéa officially confirmed a cyberattack targeting its treasury, following reports of a suspected $133 million theft, while stating retail client accounts remain completely safe.
Crédit Mutuel Arkéa confirmed on November 4, 2026, that it was targeted in a cyberattack involving unauthorized treasury transactions. The acknowledgment comes after blockchain sleuth ZachXBT previously linked the French banking group to a suspected theft of more than $133 million laundered via centralized crypto exchanges. The bank did not verify the exact financial total, but told Ledger Insights it could validate the order of magnitude.
According to Ledger Insights, Arkéa clarified that the breach did not affect client deposits or retail accounts, stating attackers compromised a third-party service provider rather than its online subsidiary Fortuneo. Bitquery's analysis showed that approximately $108.8 million in USDC moved across Kraken, Crypto.com, and OKX over 178 transactions to 15 wallets, while investigators identified about $63 million swapped for 27,553 ETH.
Bitcoin.com News reported that some funds have been blocked, including actions confirmed by Crypto.com, though additional sums moved through instant swappers and Monero (XMR). Arkéa stated that the incident is contained, operations are gradually resuming, and relevant regulatory authorities were notified.
Key facts
- $133M theft order of magnitude
- Retail accounts unaffected
- $108.8M USDC routed to exchanges
- 62.98M swapped for 27,553 ETH
Read the original at Bitcoin.com News