Crédit Mutuel Arkéa Confirms $133 Million Cyber Heist

· Cybersecurity · France

French bank Crédit Mutuel Arkéa confirmed in a press notice that attackers made transfers using the bank's own account after compromising an unnamed supplier, in a cyber heist estimated at $133 million. The bank did not identify the supplier or disclose how the breach was carried out. The incident is among the largest publicly confirmed cyber thefts directly affecting a European bank's own funds, and it highlights how third-party suppliers remain a weak link for financial institutions. The immediate effect is likely to be heightened scrutiny of vendor access controls and transfer authorization procedures at banks across the region.

Why it matters：It shows that supplier compromises can let attackers move a bank's own money, putting vendor risk management and transfer controls under scrutiny across the financial sector.

Key points

  • Attackers made transfers using the bank's own account after compromising an unnamed supplier.
  • Estimated loss is $133 million, according to the report.
  • The bank disclosed the incident in a press notice without naming the supplier.

Sources (original reporting)

More stories from this day