{"id":13,"date":"2026-11-08T13:40:12","date_gmt":"2026-11-08T13:40:12","guid":{"rendered":"https:\/\/instabox-d.sheep-mine.ts.net\/?p=13"},"modified":"2026-11-08T13:40:12","modified_gmt":"2026-11-08T13:40:12","slug":"hackers-pull-off-133-million-french-bank-heist-via-service-provider","status":"publish","type":"post","link":"https:\/\/instabox-d.sheep-mine.ts.net\/index.php\/hackers-pull-off-133-million-french-bank-heist-via-service-provider\/","title":{"rendered":"Hackers pull off $133 million French bank heist via service provider"},"content":{"rendered":"
\"Hackers<\/div>\n<\/p>\n

French cooperative bank Cr\u00e9dit Mutuel Ark\u00e9a was targeted in a cyberattack that enabled fraudulent transactions of up to $133 million, forcing it to respond by suspending certain systems.<\/p>\n

The bank says that the attacker used its own account to initiate transactions to other banking organizations, but customer assets remain unaffected.<\/p>\n

Cr\u00e9dit Mutuel Ark\u00e9a is a major French banking group with more than 5.8 million members and 211.5 billion euros in assets.<\/p>\n

Reports about the incident emerged on November 2, initially from blockchain fraud investigator ZachXBT, who warned of a large-scale unauthorized withdrawal from multiple centralized exchange accounts occurring a day earlier.<\/p>\n

According to the investigator, the attacker may have stolen up to\u00a0118 million euros ($133 million) and withdrawn it as USDC and USDT stablecoins.<\/p>\n

At the time, ZachXBT did not name the entity but said that the lack of public disclosure allowed the attacker to launder $30 million by November 3, which EU law enforcement would otherwise have frozen.<\/p>\n


\nMovement of stolen funds
\nSource: ZachXBT <\/p>\n

Cr\u00e9dit Mutuel Ark\u00e9a disclosed the incident on November 4, assuring customers that it \u201cis now closed and under control\u201d and that operations are gradually returning to normal.<\/p>\n

\u201cCr\u00e9dit Mutuel Ark\u00e9a wishes to reassure all its clients – across its federations and subsidiaries – that this incident has no impact on their assets; it has merely resulted in a delay in the execution of certain transfer transactions,\u201d [machine translated] the bank stated.<\/p>\n

However, the organization also warned of increased phishing risk, urging customers to stay vigilant against unsolicited communications and avoid sharing sensitive details over the phone or email.<\/p>\n

All suspicious messages should be verified by calling the bank adviser directly.<\/p>\n

In a separate FAQ page, the bank explained that the attacker reached its network directly through a service provider\u2019s platform, but ruled out Fortuneo.<\/p>\n

The attacker then used Ark\u00e9a\u2019s own account, not customers’ accounts, to transact with other banking institutions and convert funds into cryptocurrency.<\/p>\n

While the bank did not confirm ZachXBT’s estimation of the stolen amount, it acknowledged that the amount was significant and some funds were blocked.<\/p>\n

“Do you confirm that 118 million euros (133 million dollars) were stolen? We do not confirm this information and can only validate the order of magnitude.”<\/p>\n

Ark\u00e9a ruled out human error at the bank and instead described the incident as a “sophisticated attack.”<\/p>\n

The bank is currently working with judicial authorities and the police to establish the attack\u2019s exact origin and modus operandi.<\/p>\n

BleepingComputer has contacted Cr\u00e9dit Mutuel Ark\u00e9a to learn more about the attack and the status of investigations, but we have not received a response yet.<\/p>\n

Adaptive Security’s AI agents analyze email intent, context, and behavior to uncover phishing, business email compromise, and invoice fraud.See what’s getting through with a 14-day read-only scan of Microsoft 365 or Google Workspace, with no MX changes.
\n Start your free email security scan.<\/p>\n\n
Source credits: <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

French cooperative bank Cr\u00e9dit Mutuel Ark\u00e9a was targeted in a cyberattack that enabled fraudulent transactions of up to $133 million, forcing it to respond by suspending certain systems. The bank says that the attacker used its own account to initiate transactions to other banking organizations, but customer assets remain unaffected. Cr\u00e9dit Mutuel Ark\u00e9a is a major French banking group with … <\/p>\n

Read More<\/a><\/div>\n","protected":false},"author":1,"featured_media":14,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/www.bleepstatic.com\/content\/hl-images\/2026\/11\/06\/financial-theft.jpg","fifu_image_alt":"","footnotes":""},"categories":[17,16],"tags":[],"class_list":["post-13","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptocurrency","category-security"],"_links":{"self":[{"href":"https:\/\/instabox-d.sheep-mine.ts.net\/index.php\/wp-json\/wp\/v2\/posts\/13","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/instabox-d.sheep-mine.ts.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/instabox-d.sheep-mine.ts.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/instabox-d.sheep-mine.ts.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/instabox-d.sheep-mine.ts.net\/index.php\/wp-json\/wp\/v2\/comments?post=13"}],"version-history":[{"count":0,"href":"https:\/\/instabox-d.sheep-mine.ts.net\/index.php\/wp-json\/wp\/v2\/posts\/13\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/instabox-d.sheep-mine.ts.net\/index.php\/wp-json\/wp\/v2\/media\/14"}],"wp:attachment":[{"href":"https:\/\/instabox-d.sheep-mine.ts.net\/index.php\/wp-json\/wp\/v2\/media?parent=13"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/instabox-d.sheep-mine.ts.net\/index.php\/wp-json\/wp\/v2\/categories?post=13"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/instabox-d.sheep-mine.ts.net\/index.php\/wp-json\/wp\/v2\/tags?post=13"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}