# Crédit Mutuel Arkéa cyberattack linked to $133 million crypto theft, bank says customer assets safe

*Monday, November 9, 2026 at 2:06 AM UTC — Hamer Intelligence Services Desk*

**Published**: 2026-11-09T02:06:02.570Z (3h ago)
**Category**: cyber | **Region**: Global
**Importance**: 8/10
**Sources**: OSINT
**Permalink**: https://hamerintel.com/data/articles/22904.md
**Source**: https://hamerintel.com/summaries

---

**Deck**: French banking group Crédit Mutuel Arkéa has confirmed a cyberattack that enabled fraudulent transactions tied to an estimated $133 million in stolen crypto, even as it says the breach is contained and customer assets are unaffected.

A major French cooperative bank is dealing with the fallout from a large crypto-linked theft that unfolded through its systems.

Crédit Mutuel Arkéa has confirmed it was hit by a cyberattack that allowed fraudulent transactions to be carried out. Blockchain investigators tracking the flows estimate that more than $133 million was stolen and moved through several cryptocurrencies.

According to those investigators, the stolen funds were routed through the stablecoins USDC and USDT, as well as Ethereum and the privacy-focused coin Monero. That combination points to a mix of easily traded tokens and harder-to-trace assets once the money left more transparent networks.

The bank says the breach has been contained and that customer assets remain unaffected. It has not disclosed technical details of how attackers got in or how long they were inside its systems before the activity was detected.

For Arkéa, the immediate task is internal: isolating the compromised parts of its infrastructure, reviewing how its controls allowed unauthorized transactions on this scale, and working with regulators and law enforcement on a cross-border investigation. The use of Monero will complicate any effort to follow the money or recover it once it moved off traceable blockchains.

For the wider banking sector, a nine-figure theft linked to a conventional institution underscores that crypto-related cyber risk now reaches well beyond dedicated exchanges. Once a bank’s infrastructure can move value in or alongside digital assets, attacks that exploit those channels become a core operational and reputational threat.

Signals to watch include any technical disclosure from Arkéa or French authorities about how the intrusion happened, which would help other institutions gauge their own exposure, and moves by blockchain analytics firms or exchanges to flag and freeze addresses tied to the stolen funds. Any follow-on action from French or EU supervisors would indicate how regulators plan to respond to large crypto-enabled thefts involving mainstream banks.