Crédit Mutuel Arkéa said on 4 November 2026 that a cyberattack had enabled fraudulent transactions. The bank said the incident was under control and customer assets were protected. It temporarily suspended certain transfers and said operations were gradually resuming with added checks, but it had not disclosed an exact loss.
Blockchain investigator ZachXBT traced more than $133 million in suspected proceeds. Bitquery separately mapped about $108.8 million in USDC withdrawals across 178 transactions involving 15 wallets; the estimates cover different activity and should not be added together. A journalist reported that the theft allegedly began through Arkéa subsidiary Fortuneo, but the method used to access the banking system remains unconfirmed.
