{"id":36072,"date":"2026-11-05T20:35:20","date_gmt":"2026-11-05T18:35:20","guid":{"rendered":"https:\/\/ukrmedia.news\/?p=36072"},"modified":"2026-11-05T20:35:20","modified_gmt":"2026-11-05T18:35:20","slug":"khakery-vykraly-100-mln-yevro-credit-mutuel-arkea","status":"publish","type":"post","link":"https:\/\/ukrmedia.news\/en\/world\/khakery-vykraly-100-mln-yevro-credit-mutuel-arkea\/","title":{"rendered":"Hackers have stolen \u20ac100 million from a bank in France: the money may have been withdrawn via cryptocurrency exchanges"},"content":{"rendered":"<p>The French banking group Cr\u00e9dit Mutuel Ark\u00e9a fell victim to a large-scale cyberattack, as a result of which the attackers siphoned off around \u20ac100 million. Having gained access to banking operations via a third-party service provider, the hackers carried out a series of fraudulent transfers, after which some of the funds may have been converted into cryptocurrency. The financial institution has temporarily suspended certain transactions, and the Paris public prosecutor\u2019s office has launched a criminal investigation. The bank insists that customers\u2019 funds have not been affected.<\/p>\n<div class=\"news-summary-box\"><strong>Briefly about the main points<\/strong><\/p>\n<ul>\n<li>Hackers have stolen approximately \u20ac100 million from the French bank Cr\u00e9dit Mutuel Ark\u00e9a.<\/li>\n<li>The cybercriminals gained access to the banking system via a third-party service provider\u2019s platform.<\/li>\n<li>The stolen money may have been transferred to a cryptocurrency exchange and converted into digital assets.<\/li>\n<li>The bank has temporarily suspended certain transfers, but customers\u2019 funds have not been affected.<\/li>\n<li>The Paris Public Prosecutor\u2019s Office has launched an investigation, and some of the stolen funds have been frozen.<\/li>\n<\/ul>\n<\/div>\n<h2>Hackers gained access via a third-party service and siphoned off the bank\u2019s funds<\/h2>\n<p>The attackers gained access to one of the service providers\u2019 platforms, through which they were able to carry out transactions on behalf of <strong>Cr\u00e9dit Mutuel Ark\u00e9a<\/strong>.<\/p>\n<p>According to the bank, they used the financial institution\u2019s own account to transfer funds to other banks. Subsequently, some of the money may have been transferred to cryptocurrency platforms to make it more difficult to trace and recover the assets.<\/p>\n<p>The attack was not directed specifically at depositors\u2019 accounts. Cr\u00e9dit Mutuel Ark\u00e9a emphasised that the attackers did not use customer accounts to steal funds.<\/p>\n<p>After detecting suspicious transactions, the bank\u2019s security department activated its internal response procedures. Some of the transfers were successfully blocked, and the subsequent movement of funds was restricted.<\/p>\n<p>According to management, this appears to be a sophisticated external attack rather than an error on the part of staff. The exact method by which the platform was compromised and the identities of the attackers remain unknown.<\/p>\n<h2>The bank has confirmed a loss of around \u20ac100 million<\/h2>\n<p>On 5 November, Cr\u00e9dit Mutuel Ark\u00e9a announced that following <a href=\"https:\/\/ukrmedia.news\/en\/science-tech\/kimsuky-local-ai-cyberattack-tools\/\">cyberattacks<\/a> There is a shortfall of approximately \u20ac100 million. This is one of the most extraordinary successful attacks, in terms of scale, on a traditional European financial institution.<\/p>\n<p>Earlier, the French media had reported on the possible theft of \u20ac118 million, or approximately $133 million. However, the bank has not confirmed this figure.<\/p>\n<p>Representatives of the organisation explained that the final losses are still being calculated. Part of the money has been frozen, whilst efforts to recover the remainder are ongoing.<\/p>\n<p>The management emphasised that even significant financial losses do not threaten the stability of the banking group.<\/p>\n<p>Cr\u00e9dit Mutuel Ark\u00e9a serves over 5.8 million customers, and its total assets amount to approximately \u20ac211.5 billion.<\/p>\n<h2>The stolen funds may have been converted into cryptocurrency<\/h2>\n<p>The investigators\u2019 attention was particularly drawn to the route taken by the money.<\/p>\n<p>Initially, the criminals carried out standard bank transfers. The funds would then be transferred to cryptocurrency platforms, where they were converted into digital assets.<\/p>\n<p>This is an important distinction: no cryptocurrency was stolen from the bank. The attack targeted traditional funds, which could subsequently have been used to purchase crypto-assets.<\/p>\n<p>Independent blockchain researcher ZachXBT had previously reported on the suspicious transactions. He had been tracking the movement of large sums via cryptocurrency platforms even before the cyberattack was officially confirmed.<\/p>\n<p>Some of the withdrawn funds passed through cryptocurrency exchanges and wallets, before being converted into Ethereum and the DAI stablecoin.<\/p>\n<p>Operators of certain platforms have frozen the suspicious assets. However, some of the money has already been transferred elsewhere, making it difficult to recover it.<\/p>\n<h2>Cr\u00e9dit Mutuel Ark\u00e9a has suspended some of its operations: what has happened to customers\u2019 money?<\/h2>\n<p>Immediately after the attack was detected, the bank temporarily suspended some of its financial transactions to prevent further fraudulent transfers.<\/p>\n<p>As a result, some customers experienced delays in their transfers. Following further checks and the tightening of security measures, most transactions were restored by the morning of 4 November.<\/p>\n<p>The bank has separately denied reports that the attackers gained access to the system via its online division, Fortuneo. According to official information, they gained access via a third-party service provider\u2019s platform. The accounts of Fortuneo customers and those of other divisions were not used to withdraw funds.<\/p>\n<p>The bank states that customers\u2019 assets remain unaffected and that the incident has not had any financial consequences for depositors.<\/p>\n<h2>The Paris Public Prosecutor\u2019s Office is investigating a major bank robbery<\/h2>\n<p>After the cyberattack was detected, Cr\u00e9dit Mutuel Ark\u00e9a contacted the French law enforcement agencies and banking regulators.<\/p>\n<p>The incident was reported to the European Central Bank and the French supervisory authorities.<\/p>\n<p>The Paris Public Prosecutor\u2019s Office has confirmed that its cybercrime unit received a report from the bank on 4 November and immediately launched an investigation.<\/p>\n<p>The case is being treated as a possible organised attack on an automated data processing system. The French cyber police have been brought in to assist with the investigation. Law enforcement agencies are establishing how the third-party supplier\u2019s system was breached, the route taken by the transfers, and the individuals involved in the crime.<\/p>\n<p>Cr\u00e9dit Mutuel Ark\u00e9a has not yet disclosed the name of the compromised supplier.<\/p>\n<h2>Why did the attack cause concern amongst European banks?<\/h2>\n<p>European financial institutions devote significant resources to cybersecurity and operate under strict regulatory oversight. However, the incident involving Cr\u00e9dit Mutuel Ark\u00e9a has shown that risks can arise not only within banking systems, but also in third-party services integrated with them.<\/p>\n<p>Experts have described the scale of the embezzlement as unusual for the traditional banking sector.<\/p>\n<p>In particular, Rafai Baloch, head of RedSecLabs, highlighted the increasing sophistication of attacks targeting software interfaces and the mechanisms of interaction between financial institutions.<\/p>\n<p>Similar problems have previously occurred outside Europe. In 2016, cybercriminals stole $81 million from the Bangladesh Central Bank\u2019s account at the Federal Reserve Bank of New York.<\/p>\n<p>In the case of Cr\u00e9dit Mutuel Ark\u00e9a, identifying the source of the breach and tracing the stolen funds \u2013 some of which may already have been converted into cryptocurrency assets \u2013 will be crucial to the ongoing investigation.<\/p>","protected":false},"excerpt":{"rendered":"<p>\u0424\u0440\u0430\u043d\u0446\u0443\u0437\u044c\u043a\u0430 \u0431\u0430\u043d\u043a\u0456\u0432\u0441\u044c\u043a\u0430 \u0433\u0440\u0443\u043f\u0430 Cr\u00e9dit Mutuel Ark\u00e9a \u0441\u0442\u0430\u043b\u0430 \u0436\u0435\u0440\u0442\u0432\u043e\u044e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0457 \u043a\u0456\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438, \u0432\u043d\u0430\u0441\u043b\u0456\u0434\u043e\u043a \u044f\u043a\u043e\u0457 \u0437\u043b\u043e\u0432\u043c\u0438\u0441\u043d\u0438\u043a\u0438 \u0432\u0438\u0432\u0435\u043b\u0438 \u0431\u043b\u0438\u0437\u044c\u043a\u043e \u20ac100 \u043c\u043b\u043d. \u041e\u0442\u0440\u0438\u043c\u0430\u0432\u0448\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043e \u0431\u0430\u043d\u043a\u0456\u0432\u0441\u044c\u043a\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0456\u0439 \u0447\u0435\u0440\u0435\u0437 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u044c\u043e\u0433\u043e \u043f\u043e\u0441\u0442\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a\u0430 \u043f\u043e\u0441\u043b\u0443\u0433, \u0445\u0430\u043a\u0435\u0440\u0438 \u0437\u0434\u0456\u0439\u0441\u043d\u0438\u043b\u0438 \u0441\u0435\u0440\u0456\u044e \u0448\u0430\u0445\u0440\u0430\u0439\u0441\u044c\u043a\u0438\u0445 \u043f\u0435\u0440\u0435\u043a\u0430\u0437\u0456\u0432, \u043f\u0456\u0441\u043b\u044f \u0447\u043e\u0433\u043e \u0447\u0430\u0441\u0442\u0438\u043d\u0430 \u043a\u043e\u0448\u0442\u0456\u0432 \u043c\u043e\u0433\u043b\u0430 \u0431\u0443\u0442\u0438 \u043a\u043e\u043d\u0432\u0435\u0440\u0442\u043e\u0432\u0430\u043d\u0430 \u0443 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u0443. \u0424\u0456\u043d\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0430 \u0442\u0438\u043c\u0447\u0430\u0441\u043e\u0432\u043e \u043f\u0440\u0438\u0437\u0443\u043f\u0438\u043d\u0438\u043b\u0430 \u043e\u043a\u0440\u0435\u043c\u0456 \u0442\u0440\u0430\u043d\u0437\u0430\u043a\u0446\u0456\u0457, \u0430 \u043f\u0440\u043e\u043a\u0443\u0440\u0430\u0442\u0443\u0440\u0430 \u041f\u0430\u0440\u0438\u0436\u0430 \u0440\u043e\u0437\u043f\u043e\u0447\u0430\u043b\u0430 \u043a\u0440\u0438\u043c\u0456\u043d\u0430\u043b\u044c\u043d\u0435 \u0440\u043e\u0437\u0441\u043b\u0456\u0434\u0443\u0432\u0430\u043d\u043d\u044f. \u0411\u0430\u043d\u043a \u0437\u0430\u043f\u0435\u0432\u043d\u044f\u0454, \u0449\u043e \u0433\u0440\u043e\u0448\u0456 [\u2026]<\/p>\n","protected":false},"author":207433346,"featured_media":36073,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rank_math_description":"\u0425\u0430\u043a\u0435\u0440\u0438 \u0432\u0438\u0432\u0435\u043b\u0438 \u0431\u043b\u0438\u0437\u044c\u043a\u043e \u20ac100 \u043c\u043b\u043d \u0456\u0437 Cr\u00e9dit Mutuel Ark\u00e9a \u0447\u0435\u0440\u0435\u0437 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0456\u0439 \u0441\u0435\u0440\u0432\u0456\u0441. \u0411\u0430\u043d\u043a \u043f\u0456\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u0432 \u0430\u0442\u0430\u043a\u0443, \u043f\u0440\u043e\u043a\u0443\u0440\u0430\u0442\u0443\u0440\u0430 \u0424\u0440\u0430\u043d\u0446\u0456\u0457 \u0440\u043e\u0437\u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u043e\u0437\u0441\u043b\u0456\u0434\u0443\u0432\u0430\u043d\u043d\u044f.","rank_math_title":"\u0425\u0430\u043a\u0435\u0440\u0438 \u0432\u0438\u043a\u0440\u0430\u043b\u0438 \u20ac100 \u043c\u043b\u043d \u0456\u0437 \u0444\u0440\u0430\u043d\u0446\u0443\u0437\u044c\u043a\u043e\u0433\u043e \u0431\u0430\u043d\u043a\u0443","rank_math_focus_keyword":"\u0425\u0430\u043a\u0435\u0440\u0438","td_subtitle":"","subtitle":"","footnotes":""},"categories":[805619],"tags":[806814],"class_list":["post-36072","post","type-post","status-publish","format-standard","has-post-thumbnail","category-world","tag-finansy"],"_links":{"self":[{"href":"https:\/\/ukrmedia.news\/en\/wp-json\/wp\/v2\/posts\/36072","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ukrmedia.news\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ukrmedia.news\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ukrmedia.news\/en\/wp-json\/wp\/v2\/users\/207433346"}],"replies":[{"embeddable":true,"href":"https:\/\/ukrmedia.news\/en\/wp-json\/wp\/v2\/comments?post=36072"}],"version-history":[{"count":1,"href":"https:\/\/ukrmedia.news\/en\/wp-json\/wp\/v2\/posts\/36072\/revisions"}],"predecessor-version":[{"id":36074,"href":"https:\/\/ukrmedia.news\/en\/wp-json\/wp\/v2\/posts\/36072\/revisions\/36074"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ukrmedia.news\/en\/wp-json\/wp\/v2\/media\/36073"}],"wp:attachment":[{"href":"https:\/\/ukrmedia.news\/en\/wp-json\/wp\/v2\/media?parent=36072"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ukrmedia.news\/en\/wp-json\/wp\/v2\/categories?post=36072"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ukrmedia.news\/en\/wp-json\/wp\/v2\/tags?post=36072"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}