Crédit Mutuel Arkéa says operations resume after cyberattack

Crédit Mutuel Arkéa says operations are resuming after a cyberattack that enabled fraudulent transactions. The French cooperative bank says it has contained the attack and is trying to recover stolen funds.

The bank, based in Brittany in western France, said on 4 November 2026, that its teams had detected the attack. It had temporarily suspended certain transactions to secure operations and prevent further fraudulent movements. Euronews said the bank had not explained how the attack was carried out or identified who might be responsible.

Bank says transfers delayed as it assesses losses

The bank said customer assets were unaffected, certain transfers were delayed and no customer would suffer a financial loss. It said it informed the relevant authorities as soon as the attack was detected.

Crédit Mutuel Arkéa said its losses were below the $133 million reported by CoinDesk and would not undermine the group’s financial strength. Separately, Le Télégramme said €118 million (about $132.7 million) had been stolen; the bank did not confirm that figure.

Independent investigator ZachXBT, who specializes in tracking cryptocurrency transactions, first made the fraud public. According to AFP, ZachXBT said the stolen funds had been routed through multiple accounts on cryptocurrency exchanges.

The bank told Le Parisien that some funds had been frozen. Its teams are continuing to assess the financial consequences, and a spokesperson said it was too early to give a final figure.