<!-- mobian-agent-page publisher="dailydev" canonical="https://daily.dev/posts/hackers-pull-off-133-million-french-bank-heist-via-service-provider-tlrurqzb9" -->

---
title: Hackers pull off $133 million French bank heist via...
description: French bank Crédit Mutuel Arkéa suffered a cyberattack that enabled fraudulent transactions through its own account. The attacker reached the bank's network...
canonical: https://daily.dev/posts/hackers-pull-off-133-million-french-bank-heist-via-service-provider-tlrurqzb9
twitter:card: summary_large_image
twitter:site: @dailydotdev
og:type: website
og:site_name: daily.dev
og:title: Hackers pull off $133 million French bank heist via service provider | daily.dev
og:description: French bank Crédit Mutuel Arkéa suffered a cyberattack that enabled fraudulent transactions through its own account. The attacker reached the bank's network...
og:url: https://daily.dev/posts/hackers-pull-off-133-million-french-bank-heist-via-service-provider-tlrurqzb9
og:image: https://api.daily.dev/og/posts/tlRUrQzb9.png
og:image:alt: Hackers pull off $133 million French bank heist via service provider
og:image:width: 1200
og:image:height: 630
og:locale: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Hackers pull off $133 million French bank heist via service provider

**[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 3 min read · 0 upvotes · 0 comments

## Summary

French bank Crédit Mutuel Arkéa suffered a cyberattack that enabled fraudulent transactions through its own account. The attacker reached the bank's network through a service provider's platform, but the bank ruled out Fortuneo. The attacker may have converted funds into USDC and USDT stablecoins, and blockchain investigator ZachXBT says $30 million was laundered by November 3. The bank says customer assets are unaffected, some funds were blocked, and it calls the incident a 'sophisticated attack,' ruling out human error.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://www.bleepingcomputer.com/news/security/hackers-pull-off-133-million-french-bank-heist-via-service-provider>

## Questions this post answers

### How did attackers steal $133 million from Crédit Mutuel Arkéa?

Attackers reached the bank's network directly through a third-party service provider's platform, which has not been named except to rule out Fortuneo. They then used Arkéa's own account, not customer accounts, to send funds to other banking institutions and convert them into USDC and USDT stablecoins. The bank calls it a 'sophisticated attack' and ruled out human error.

_Anyone tracking third-party breach risk in banking can follow incident details like this on daily.dev._

### How much money did Crédit Mutuel Arkéa lose in its cyberattack?

Blockchain fraud investigator ZachXBT estimated the theft at up to 118 million euros, or $133 million, withdrawn as USDC and USDT stablecoins. Crédit Mutuel Arkéa has not confirmed the exact figure but acknowledged the amount was significant, said some funds were blocked, and stated customer assets were unaffected.

_Developers following crypto fraud and bank breach investigations can track updates like this on daily.dev._

## Similar posts on daily.dev

- [Hackers arrested over €30M bank fraud exploiting service provider flaw](https://daily.dev/posts/hackers-arrested-over-30m-bank-fraud-exploiting-service-provider-flaw-nm6xjctxm) · BleepingComputer · 0 upvotes · 0 comments

---

Tags: [#cyber](https://daily.dev/tags/cyber), [#crypto](https://daily.dev/tags/crypto), [#fintech](https://daily.dev/tags/fintech), [#phishing](https://daily.dev/tags/phishing)

[View this post on daily.dev](https://daily.dev/posts/hackers-pull-off-133-million-french-bank-heist-via-service-provider-tlrurqzb9)

```json
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]}
{"@context":"https://schema.org","@type":"TechArticle","headline":"Hackers pull off $133 million French bank heist via service provider","url":"https://daily.dev/posts/hackers-pull-off-133-million-french-bank-heist-via-service-provider-tlrurqzb9","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/hackers-pull-off-133-million-french-bank-heist-via-service-provider-tlrurqzb9"},"datePublished":"2026-11-07T15:35:45.137Z","dateModified":"2026-11-07T15:36:42.251Z","description":"French bank Crédit Mutuel Arkéa suffered a cyberattack that enabled fraudulent transactions through its own account. The attacker reached the bank's network...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b0b5f0d14b88c7076e50c5615e575e82?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b0b5f0d14b88c7076e50c5615e575e82?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/hackers-pull-off-133-million-french-bank-heist-via-service-provider-tlrurqzb9","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cyber,crypto,fintech,phishing","timeRequired":"PT3M"}
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"Hackers pull off $133 million French bank heist via service provider"}]}
{"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/hackers-pull-off-133-million-french-bank-heist-via-service-provider-tlrurqzb9#faq","mainEntity":[{"@type":"Question","name":"How did attackers steal $133 million from Crédit Mutuel Arkéa?","acceptedAnswer":{"@type":"Answer","text":"Attackers reached the bank's network directly through a third-party service provider's platform, which has not been named except to rule out Fortuneo. They then used Arkéa's own account, not customer accounts, to send funds to other banking institutions and convert them into USDC and USDT stablecoins. The bank calls it a 'sophisticated attack' and ruled out human error. Anyone tracking third-party breach risk in banking can follow incident details like this on daily.dev."}},{"@type":"Question","name":"How much money did Crédit Mutuel Arkéa lose in its cyberattack?","acceptedAnswer":{"@type":"Answer","text":"Blockchain fraud investigator ZachXBT estimated the theft at up to 118 million euros, or $133 million, withdrawn as USDC and USDT stablecoins. Crédit Mutuel Arkéa has not confirmed the exact figure but acknowledged the amount was significant, said some funds were blocked, and stated customer assets were unaffected. Developers following crypto fraud and bank breach investigations can track updates like this on daily.dev."}}]}
```

