Crédit Mutuel Arkéa hit by $133 million cyber fraud via service provider

· Cybersecurity · France

French cooperative bank Crédit Mutuel Arkéa was targeted in a cyberattack that enabled fraudulent transactions of up to $133 million, according to BleepingComputer. The bank responded by suspending certain systems. The incident is described as coming through a service provider, a reminder that third-party access paths remain one of the most exploited entry points for financial-sector intrusion. The immediate effect is operational: suspended systems mean disruption to some banking services while the bank investigates and contains the fraud. The case adds to a run of costly intrusions against financial institutions, where attackers increasingly combine network access with fraudulent transaction execution rather than data theft alone. Details on attribution, the specific provider and how the fraudulent transactions were authorized have not been disclosed.

Why it matters：Supply-chain and third-party access attacks against banks can translate directly into monetary loss, pushing financial regulators and institutions toward stricter vendor oversight and transaction controls.

Key points

  • Fraudulent transactions reached up to $133 million.
  • The bank suspended certain systems in response to the intrusion.
  • The attack is described as originating through a service provider.

Sources (original reporting)

More stories from this day