Crédit Mutuel Arkéa Restores Services Following Cyberattack, Evaluates Financial Impact
Following a cyberattack connected to an alleged $133M heist, Crédit Mutuel Arkéa reported that virtually all services have been restored, with portions of the stolen funds now frozen as recovery operations continue.
On Wednesday, French financial institution Crédit Mutuel Arkéa announced that virtually all of its services had been restored following a cyberattack that appears connected to a significant theft from the bank's proprietary account.
According to the bank's statement, services were brought back online after comprehensive security assessments and the implementation of enhanced protective measures. The institution emphasized that no customer deposits were compromised and that the incident merely caused postponements for certain transaction processing.
Additionally, the bank revealed that cybercriminals obtained entry through a third-party service provider's systems, contradicting earlier speculation that its digital banking arm Fortuneo was the entry point. The perpetrators moved funds belonging to the bank itself to external financial institutions, potentially creating opportunities to exchange the stolen assets into cryptocurrency.
The alleged theft initially came to light through withdrawal activity at cryptocurrency platforms. Blockchain intelligence company Bitquery monitored withdrawals originating from user accounts on Kraken, Crypto.com and OKX exchanges prior to any public disclosure of the victim's identity.
Independent blockchain investigator ZachXBT initially reported over $106 million in questionable withdrawal activity on Monday and subsequently increased his assessment beyond $133 million on Tuesday following the discovery of an additional $27 million in suspicious transactions. His Wednesday analysis pointed to Arkéa as the probable victim of the attack.
Subsequently, the bank publicly acknowledged the security breach and indicated that it continues to evaluate the complete financial ramifications.
We are not confirming these figures; we can only confirm the approximate scale
Arkéa spokesperson
According to Arkéa's statement, portions of the stolen funds have been successfully frozen and additional recovery initiatives remain in progress. Both Kraken and Crypto.com previously informed Cointelegraph that they had imposed restrictions on specific accounts or prevented access to funds associated with the suspected theft. Both cryptocurrency exchanges stressed that their respective platforms' security and integrity remained fully intact.