Crédit Mutuel Arkéa said on November 4, 2026, that a cyberattack had enabled fraudulent transactions. The bank described the access route as a service provider’s platform, reached using an Arkéa account. Its initial statement announced the incident that day.
The access route Arkéa described
In a clarification issued November 4, Arkéa said attackers reached the group through a service provider’s platform and used an Arkéa account to make transactions to other banking actors. Those transfers may then have enabled conversion to cryptocurrency. The bank said the attackers did not enter through Fortuneo or use customer accounts belonging to its federations or subsidiaries. Read Arkéa’s clarification.
What the bank said about customers and operations
Arkéa said customer assets were unaffected, though some transfers were delayed. It also said certain transactions were suspended as a precaution, relevant authorities and supervisory bodies were contacted, and almost all operations resumed during the morning of November 4 after checks and enhanced security measures.
The bank described its phishing warning as preventive, urging customers to stay alert to attempts that can increase after an attack. On November 4, Arkéa said its assessment of the financial consequences and recovery work were continuing, and that some affected funds had been blocked.
