Hackers steal €118 million from French bank Crédit Mutuel Arkéa via third-party provider

· Investigations · France

Hackers infiltrated French bank Crédit Mutuel Arkéa through a third-party provider and allegedly stole an estimated 118 million euros, according to OCCRP. The bank said the heist did not compromise client funds or data. The case highlights how attackers increasingly reach financial institutions through outside vendors rather than direct breaches, a route that complicates accountability and oversight. The alleged loss, disclosed publicly, makes it one of the larger cyber-theft episodes reported against a European lender recently. How the breach was carried out, which provider was involved and what regulators will do next were not detailed in the reporting.

Why it matters：It shows that third-party vendors remain a weak point in financial-sector security, and the scale of the loss could push regulators to toughen supplier-risk rules for banks globally.

Key points

  • Estimated loss is about 118 million euros.
  • Entry point was a third-party provider, not the bank directly.
  • The bank says client funds and data were not compromised.

Sources (original reporting)

More stories from this day