← Back to overview

French cooperative bank Crédit Mutuel Arkéa was targeted in a cyberattack that resulted in fraudulent transactions totaling up to $133 million. The attack was carried out through a third-party service provider, highlighting the risks of supply chain and third-party vendor compromises in the financial sector. In response to the breach, the bank was forced to suspend certain systems to contain the damage. The incident underscores the growing threat of financially motivated cybercriminals targeting banks through their less-secured service providers. This type of attack vector—exploiting trusted third-party relationships—has become increasingly common in the financial industry. The scale of the financial loss makes this one of the more significant banking cyberattacks in recent European history.

Affected products

  • Crédit Mutuel Arkéa

Categories

  • Critical Infrastructure
  • Data Breach & Exfiltration
  • Supply Chain & Dependencies