Crédit Mutuel Arkéa said on Wednesday, November 4, that it had been targeted in a Cyberattack that enabled fraudulent transactions. The bank said the incident was now under control, but did not confirm the amount reportedly taken.
French newspaper Le Télégramme put the loss at $133 million, or around €118 million. Arkéa said the incident had no financial impact on its customers, although some banking services, including certain transfers, remained unavailable.
The attack was first publicly flagged by ZachXBT, a US-based researcher known for investigating cryptocurrency security and money laundering. In posts on Telegram on Monday, November 2, he said an EU-based entity was suspected of losing $106 million. The following day, he reported identifying more than $27 million in additional withdrawals and later named Arkéa.
ZachXBT also published a diagram tracing the alleged laundering route and said, with a high degree of confidence, that the attack was not carried out by Lazarus, a name used for North Korean hackers.
Sources: Le Monde Économie.