[Security](https://leakly.com/security/)

[Confirmed]

# French bank Crédit Mutuel Arkéa hit by attack enabling up to $133 million in fraudulent transfers

The bank suspended some systems and says customer assets were not affected.

Leaked on 07 November 2026

![Crédit Mutuel Arkéa headquarters](https://leakly.com/assets/images/credit-mutuel-arkea-133-million-fraud-hero.jpg)

Crédit Mutuel Arkéa headquarters. [Photo: Jul.H / Wikimedia Commons, cropped](https://commons.wikimedia.org/wiki/File:Siege-credit-mutuel-arkea.jpg) ([CC BY-SA 4.0](https://creativecommons.org/licenses/by-sa/4.0/))

French cooperative bank Crédit Mutuel Arkéa was hit by a cyberattack that enabled fraudulent transactions of up to $133 million, [BleepingComputer](https://www.bleepingcomputer.com/news/security/hackers-pull-off-133-million-french-bank-heist-via-service-provider/) (@BleepinComputer) reported on November 7.

> **BleepingComputer** @BleepinComputer
>
> Hackers pull off $133 million French bank heist via service provider
> https://t.co/xOqu6l21Rd
> https://t.co/xOqu6l21Rd
>
> 141 likes · 45 reposts · counts as of 09 Nov 2026, 12:49 UTC
>
> — BleepingComputer (@BleepinComputer) [November 7, 2026](https://twitter.com/BleepinComputer/status/2119089297642918202)

not in our leaker index

The bank says the attacker used its own account to send transactions to other banking organizations and that customer assets remain unaffected, according to BleepingComputer. Reports first surfaced on November 2.

The bank confirmed the attack. How the attacker got in through the service provider is still under investigation.

## What we know

* Arkéa confirmed the attack.
* Up to $133 million moved fraudulently.

## What we don't know

* Recovery of the funds.

## What would confirm it

Already confirmed by the bank.

## Sources

* [Original X post by @BleepinComputer](https://x.com/BleepinComputer/status/2119089297642918202)
* [Hackers pull off $133 million French bank heist via service provider](https://www.bleepingcomputer.com/news/security/hackers-pull-off-133-million-french-bank-heist-via-service-provider/)

[Confirmed]

## What happened later

The bank confirmed the attack. How the attacker got in through the service provider is still under investigation.

Status key: [how we label leaks](https://leakly.com/editorial-guidelines/#status) · [Corrections](https://leakly.com/corrections/) · [Contact](https://leakly.com/contact/)