According to ChainCatcher, French banking group Crédit Mutuel Arkéa disclosed details on November 4 of a theft previously revealed by ZachXBT. The bank said attackers gained access through the platform of an unnamed third-party service provider, then used the bank’s own accounts to transfer funds to other financial institutions. The funds may have subsequently been exchanged for cryptocurrency through professional platforms.
The bank denied that its online bank Fortuneo was the point of entry and said customer assets were unaffected. It did not confirm reports of about 118 million euros stolen, but acknowledged the amount was of that scale. Some funds have been frozen, while the final loss is still being assessed.