Crédit Mutuel Arkéa says hackers accessed its systems and carried out fraudulent transactions. The bank says the incident has been contained and customers’ money is safe. In a statement to customers, Arkéa said the attack was under control and that the security incident had been closed. The bank has not disclosed how the attackers gained access or the amount taken, though it is still assessing the loss and insists it was not large enough to threaten the group’s financial position. External estimates place the loss much higher. Blockchain investigator ZachXBT flagged suspicious withdrawals on 2 November and estimates more than $133 million was stolen, mostly in stablecoins routed through cryptocurrency exchanges. ZachXBT said the final figure could be higher once over-the-counter transactions are included and stated he is confident the attack was not conducted by North Korea’s Lazarus Group. Arkéa temporarily suspended some transactions during the investigation; those services are being restored, though some transfers were delayed. The bank notified authorities and warned customers to beware phishing attempts following the breach, advising against sharing passwords, card details, or verification codes via text and to contact their adviser with suspicious requests. The route the money took remains unclear. French outlets reported funds were withdrawn through Arkéa’s online banking subsidiary Fortuneo before being converted to cryptocurrency via accounts opened under false identities. Bitquery tracked around $109 million in USDC, with movements through Kraken, Crypto.com, and OKX around 1–2 November. Some funds were converted to ether and later moved through Monero. Arkéa groups Crédit Mutuel federations in Brittany and southwest France, with about 5.8 million customers and €211.5 billion in assets, remains smaller than BNP Paribas and Société Générale.