--- title: French banking group hit by supply chain cyberattack description: French regional bank Crédit Mutuel Arkéa confirmed attackers accessed an internal account through an unnamed third-party service provider's platform and... canonical: https://daily.dev/posts/french-banking-group-hit-by-supply-chain-cyberattack-iemvx2x18 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: French banking group hit by supply chain cyberattack | daily.dev og:description: French regional bank Crédit Mutuel Arkéa confirmed attackers accessed an internal account through an unnamed third-party service provider's platform and... og:url: https://daily.dev/posts/french-banking-group-hit-by-supply-chain-cyberattack-iemvx2x18 og:image: https://api.daily.dev/og/posts/IEmVX2x18.png og:image:alt: French banking group hit by supply chain cyberattack og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # French banking group hit by supply chain cyberattack **[CSO Online](https://daily.dev/sources/csoonline)** · 2 min read · 0 upvotes · 0 comments ## Summary French regional bank Crédit Mutuel Arkéa confirmed attackers accessed an internal account through an unnamed third-party service provider's platform and transferred funds to other financial institutions. Blockchain investigator ZachXBT first flagged the breach on Monday, and the bank confirmed its identity as the victim on Wednesday. French newspaper Le Télégramme reported the stolen amount as over €118 million ($133 million), and the bank said only that the order of magnitude was accurate. The bank temporarily suspended some transactions, says customer assets are unaffected, and some funds have already been frozen for recovery. French law enforcement is investigating. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What happened in the Crédit Mutuel Arkéa cyberattack? Attackers accessed an internal account at Crédit Mutuel Arkéa through an unnamed third-party service provider's platform and transferred funds to other financial institutions, potentially for conversion to cryptocurrency. French newspaper Le Télégramme reported the theft exceeded €118 million ($133 million), an order of magnitude the bank confirmed without giving an exact figure. The bank suspended some transactions and says customer assets were not affected. _Teams assessing third-party risk in financial systems can follow incidents like this on daily.dev._ ### Who discovered the Crédit Mutuel Arkéa breach? Blockchain investigator ZachXBT first detected the attack on Monday and reported it without naming the victim, before identifying Crédit Mutuel Arkéa as the suspected target on Wednesday, a claim the bank then confirmed. Cryptocurrency news outlet CoinDesk had covered the initial, unattributed finding the day before the bank's public admission. _Developers tracking how security researchers uncover supply chain breaches can follow coverage on daily.dev._ ## Similar posts on daily.dev - [Hackers arrested over €30M bank fraud exploiting service provider flaw](https://daily.dev/posts/hackers-arrested-over-30m-bank-fraud-exploiting-service-provider-flaw-nm6xjctxm) · BleepingComputer · 0 upvotes · 0 comments - [France’s postal and banking services disrupted by suspected DDoS attack](https://daily.dev/posts/france-s-postal-and-banking-services-disrupted-by-suspected-ddos-attack-szrjsm90t) · TechCrunch · 0 upvotes · 0 comments - [Attacker gets into France's DB listing all bank accounts](https://daily.dev/posts/attacker-gets-into-france-s-db-listing-all-bank-accounts-w9x51rgws) · The Register · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#crypto](https://daily.dev/tags/crypto) [View this post on daily.dev](https://daily.dev/posts/french-banking-group-hit-by-supply-chain-cyberattack-iemvx2x18) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"French banking group hit by supply chain cyberattack","url":"https://daily.dev/posts/french-banking-group-hit-by-supply-chain-cyberattack-iemvx2x18","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/french-banking-group-hit-by-supply-chain-cyberattack-iemvx2x18"},"datePublished":"2026-11-05T22:21:58.668Z","dateModified":"2026-11-05T23:59:36.326Z","description":"French regional bank Crédit Mutuel Arkéa confirmed attackers accessed an internal account through an unnamed third-party service provider's platform and...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8e3adede95d050981b37144a72dc0fbd?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8e3adede95d050981b37144a72dc0fbd?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"CSO Online","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"CSO Online","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/98667e4b5cac46cf9c470819c6cf71cd","url":"https://daily.dev/sources/csoonline"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/french-banking-group-hit-by-supply-chain-cyberattack-iemvx2x18","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cyber,crypto","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"CSO Online","item":"https://daily.dev/sources/csoonline"},{"@type":"ListItem","position":3,"name":"French banking group hit by supply chain cyberattack"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/french-banking-group-hit-by-supply-chain-cyberattack-iemvx2x18#faq","mainEntity":[{"@type":"Question","name":"What happened in the Crédit Mutuel Arkéa cyberattack?","acceptedAnswer":{"@type":"Answer","text":"Attackers accessed an internal account at Crédit Mutuel Arkéa through an unnamed third-party service provider's platform and transferred funds to other financial institutions, potentially for conversion to cryptocurrency. French newspaper Le Télégramme reported the theft exceeded €118 million ($133 million), an order of magnitude the bank confirmed without giving an exact figure. The bank suspended some transactions and says customer assets were not affected. Teams assessing third-party risk in financial systems can follow incidents like this on daily.dev."}},{"@type":"Question","name":"Who discovered the Crédit Mutuel Arkéa breach?","acceptedAnswer":{"@type":"Answer","text":"Blockchain investigator ZachXBT first detected the attack on Monday and reported it without naming the victim, before identifying Crédit Mutuel Arkéa as the suspected target on Wednesday, a claim the bank then confirmed. Cryptocurrency news outlet CoinDesk had covered the initial, unattributed finding the day before the bank's public admission. Developers tracking how security researchers uncover supply chain breaches can follow coverage on daily.dev."}}]} ```