Credit Mutuel Arkea: hackers steal ~€100m in cyber heist from French bank
Severity: high · Patch status: no-fix-needed · Since 2026-11-11
French lender Credit Mutuel Arkea disclosed that hackers stole approximately €100 million ($112.61 million) in a cyber heist, a rare case of cybercriminals successfully stealing funds directly from a mainstream bank. The bank says it is working to recover the money. The report notes the attack follows a prior theft, though details of the attack vector, affected systems, and attribution are not stated in the source. Customers and counterparties of the bank may be affected; no fix applies as this is a breach incident rather than a product vulnerability. Investigation and recovery efforts are ongoing.
What to do
- Monitor for follow-up disclosures and regulatory notices from Credit Mutuel Arkea and French authorities (ANSSI, ACPR)
- If you are a customer or business partner, watch for phishing or fraud attempts exploiting the incident and review account activity
- Review your own bank's fraud controls and out-of-band payment verification for large transfers
- Assess exposure to French banking counterparties and any funds held with the institution
Sources
All live incidents on Threat Watch
