Crédit Mutuel Arkéa Probes Unauthorized Transfers From Its Own Accounts via Third-Party Platform

Attackers reached Crédit Mutuel Arkéa through a platform run by a third-party service provider and used the bank's own accounts to send unauthorized transfers to other financial institutions. The bank has not confirmed the reported figure of about 118 million euros, saying it only acknowledges the scale of the incident. Some funds were intercepted and blocked, and part may have been converted into cryptocurrency. The bank says customer accounts and its Fortuneo unit were not used as entry points, and that suspicious transactions were halted and the incident contained. The initial access vector and the vendor involved remain under investigation.