Crédit Mutuel Arkéa confirms a cyberattack let attackers make fraudulent transactions; on-chain tracing puts the theft at $133M+, the bank says 'several tens of millions of euros' and no client losses

official (Crédit Mutuel Arkéa press statement, Nov 4, via AFP/France 24, franceinfo, Le Parisien). The $133M figure is ZachXBT's and Le Télégramme's; the bank has not confirmed it2026-11-04

Crédit Mutuel Arkéa confirms a cyberattack let attackers make fraudulent transactions; on-chain tracing puts the theft at $133M+, the bank says 'several tens of millions of euros' and no client losses

Timeline: L'Agefi says the incident happened on Nov 1; ZachXBT reported suspicious withdrawals on Nov 2 before naming the bank.
Not disclosed: the entry point, whether internal systems or the bank's own exchange accounts were compromised, and the final amount.
Exchanges: Kraken restricted the linked accounts and Crypto.com blocked related funds (per Cointelegraph, Nov 3).

For banks and fintechs: this is a rare case of fiat moved out of a bank and laundered through exchange accounts in hours. Worth checking: alerting on large outbound transfers to newly added exchange counterparties, and how fast your treasury and payments teams can freeze outbound rails.

Sources: France 24/AFP: Crédit Mutuel Arkéa victime d'une cyberattaque (Nov 4) · franceinfo: piratage de plus de 100 millions d'euros (Nov 4) · Le Parisien: bank says several tens of millions, amount being assessed (Nov 4) · Cointelegraph: ZachXBT names Crédit Mutuel Arkéa (Nov 4)