Crédit Mutuel Arkéa disclosed details of the theft, denying that online banking was the entry point for the attack

On November 4, the French banking group Crédit Mutuel Arkéa announced details of a previously disclosed theft of funds revealed by ZachXBT. The bank stated that the attackers gained access through a platform of an unnamed third-party service provider, and then used the bank's own accounts to transfer funds to other financial institutions, with the related funds potentially being exchanged for cryptocurrency through specialized platforms.

The bank denied that the attack entry point was located in its online bank Fortuneo and stated that customer assets were unaffected. Regarding the previously reported stolen amount of approximately 118 million euros (133 million dollars), the bank did not confirm the specific figure but acknowledged its magnitude, with some funds already frozen and the final loss still being assessed.