Crédit Mutuel Arkéa confirms theft of about…

HighBreachNo software to update

In 30 seconds

Alleged

A cybersecurity account on X reports that Crédit Mutuel Arkéa chair Julien Carmona told AFP attackers diverted about €100 million from the bank and that some funds were recovered. The supplied evidence contains no direct statement from Arkéa or AFP, so the incident and amount remain third-party allegations here.

What happened

Alleged

According to the post, the attackers first obtained material from a compromised supplier, used it to enter Arkéa, and generated fake IBANs at its online bank Fortuneo. Beginning Sunday, November 1, they allegedly sent instant payments to real accounts opened at other European banks before moving the funds toward cryptocurrency.

Why it matters

Inferred

If accurate, the account describes a supply-chain compromise that reached a bank's payment infrastructure and turned access into rapid cross-border transfers. That combination could make intervention difficult because instant payments can disperse funds across several institutions quickly.

What to do

Inferred

The single supplied post is not enough to justify action by customers or to establish that customer accounts were affected. Banks and suppliers can nonetheless use the alleged sequence as a review checklist: third-party access, IBAN creation, unusual instant payments, recipient accounts and cryptocurrency off-ramps.

Confirmed and still uncertain

Observed

The post gives an approximate loss and says an unspecified portion was recovered. It does not identify the supplier, explain how access was obtained, quantify the recovery, name recipient banks, provide transaction records or clarify whether customers suffered losses.

What people are saying

Alleged

The account attributes to Carmona the view that Arkéa was the first French bank, and possibly the first European bank, to suffer a successful attack of this kind. It also says he considered AI involvement “very probable,” but supplies no technical evidence establishing how AI was used.

Evolution

Alleged

The reported chain begins with a supplier compromise, continues with access to Arkéa and the creation of fake Fortuneo IBANs, then moves into instant payments through accounts at other European banks and onward to cryptocurrency. The latest development mentioned is the recovery of part of the money, without an amount or date.

Reach

Observed

1 independent groups, 1 updates, and 4 engagements.

Technical detail

Alleged

The post describes instant payments as the mechanism used to move money into genuine bank accounts allegedly opened by the attackers. It labels the incident AI-enabled, yet provides no indicators of compromise, malware details, authentication method or specific AI capability.

Sources and evidence

Observed

The evidence set consists of one IntCyberDigest post on X, including an attached image, that summarizes remarks attributed to Carmona in an AFP interview. No primary bank disclosure, AFP article, regulatory notice or blockchain analysis is included, so independent corroboration is still needed.