Crédit Mutuel Arkéa seeks stolen funds after €100 million cyberattack

Crédit Mutuel Arkéa confirmed that hackers had accessed its computer systems and stolen money, Bloomberg Technology reported on November 4. The French bank said the intrusion enabled fraudulent transactions.

The distinction between the bank's money and customers' deposits is central to the story. Le Monde reported that attackers stole part of the own funds of Fortuneo, Arkéa's online bank. The bank has said customers will suffer no financial loss, according to Euronews.

On November 4, Franceinfo reported a hack estimated at more than €100 million. The bank said the incident was under control and clients were not affected.

Other reporting that day put the amount at €118 million. Euronews made clear that the bank had not confirmed that figure, even as it acknowledged the attack.

On November 5, The Block reported that Crédit Mutuel Arkéa had validated the order of magnitude of a $133 million estimate without confirming the exact loss. Separately, World News CNA reported that the bank said €100 million was missing. These accounts indicate the scale of the theft, but do not establish a single confirmed total.

Reporting on the route into the bank also developed on November 5. tech reported that attackers went through a bank service provider and moved stolen money into cryptocurrency. However, Franceinfo said the thieves' method remained unclear, reporting the bank's description of a sophisticated external attack.

The recovery effort was also underway by November 5. The Financial Times reported that Crédit Mutuel Arkéa was seeking to recover funds stolen in an attack on the institution's own account.

The bank says the incident has been contained and customers' money is safe, according to The Next Web. That assurance does not mean the bank itself escaped a loss: the theft involved its own funds, according to reporting by Le Monde and the Financial Times.

An investigation has been opened, Franceinfo reported on November 5. The precise loss and the full method of the attack remain unresolved in the available coverage.

The immediate questions are how much the bank can recover and what final loss it will confirm. The Financial Times reported the recovery effort, while The Block said the bank had confirmed only the approximate scale of the reported theft.

Investigators also need to establish how the attackers gained access and moved the money. The service provider and cryptocurrency route reported by tech offers a possible explanation, but Franceinfo reported that the method was still unclear.