Credit Mutuel Arkea confirms cyber theft of around €100 million

What happened

Hackers stole around €100 million from French banking group Credit Mutuel Arkea in a cyberattack, according to the lender's confirmation reported by RT and the Financial Times ¹. France 24 reported that a French bank said online hacking stole around $100 million ². RT reported that the bank acknowledged the scale of the attack in a statement on Wednesday ³.

What is confirmed

The confirmed claim in the ledger is that hackers stole around €100 million from Credit Mutuel Arkea in a cyberattack, a figure the lender has confirmed, as reported by RT and the Financial Times ¹. RT's account states that the lender confirmed the theft of around €100 million in what it described as a sophisticated cyberattack ¹. No other element of the ledger carries confirmed or primary status.

Where the accounts differ

RT reports that the hackers gained access through a compromised external service provider and used the bank's own account to carry out fraudulent transfers to other financial institutions ⁴. RT also reports that the attackers exploited a third-party service provider to move money into other bank accounts, with some funds potentially converted into cryptocurrency ⁵. RT further reports that Credit Mutuel Arkea declined to confirm the exact amount stolen ⁶.

France 24 frames the story around a French bank saying online hacking stole around $100 million, without the mechanism or provider details carried in RT's account ². The Financial Times appears in the ledger only alongside RT on the confirmed €100 million figure ¹. The ledger contains no bloc summaries beyond these outlet-level attributions, so the difference between accounts is one of detail and framing rather than of a directly contested fact.

What is not known yet

Several elements rest on a single outlet. The mechanism of the attack — access through a compromised external service provider and use of the bank's own account for fraudulent transfers — was reported only by RT ⁴. The exploitation of a third-party service provider to move money into other bank accounts, with some funds potentially converted into cryptocurrency, was reported only by RT ⁵. The bank's acknowledgement of the scale of the attack in a Wednesday statement was reported only by RT ³, as was its declining to confirm the exact amount stolen ⁶.

The blockchain figures were reported only by RT: an initial estimate by investigator ZachXBT of more than $106 million ⁷, and a further $27 million in suspicious withdrawals bringing the total to over $133 million ⁸. France 24's dollar figure of around $100 million was reported only by France 24 ². The ledger leaves open how the euro and dollar figures relate, whether the larger blockchain totals are accepted by the bank, and who carried out the attack.

Why it matters

The confirmed loss of around €100 million makes this a large reported cyber theft from a European lender ¹. If the single-source account of a compromised external service provider is correct, this suggests the exposure ran through a third party rather than the bank alone ⁴⁵. The gap between the confirmed €100 million and the reported blockchain totals of over $133 million ⁸ suggests the final figure may not yet be settled, particularly since the bank reportedly declined to confirm the exact amount ⁶. Analysis: the reliance on single-source detail means the public picture of how the money moved rests on one outlet's reporting.