French Bank Says About €100 Million Is Missing After Cyberattack

Bank reports funds missing

November 5, 2026 · 6:40 a.m. Central / 1:40 p.m. in France

French banking group Crédit Mutuel Arkéa says about €100 million is missing after a cyberattack that used the bank’s own account to send fraudulent transactions to other financial institutions, Reuters reported Thursday.

The bank said customer accounts were not used and customer assets were not affected. Some transfers were delayed when it temporarily suspended transactions as a precaution, according to the bank and Reuters. The group says it is working with authorities.

The €100 million figure is approximate. The bank told Reuters it could not yet say how much it would recover; the final financial impact remains uncertain.

What the bank says happened

In a November 4 statement, Arkéa said the attackers entered through a service provider’s platform and reached the bank directly. It rejected reports that its online banking subsidiary Fortuneo was the entry point.

The bank said the transactions went to other banking institutions and may have enabled conversion into cryptocurrency through specialist platforms. That possibility is not confirmation that every transfer was converted, or an identification of the attackers.

Arkéa said some funds had been blocked and recovery efforts were underway. It described the incident as contained and said most operations had resumed after additional security checks.

Investigation and unanswered questions

The Paris prosecutor’s office told Reuters that its cybercrime unit opened an investigation after receiving the bank’s complaint Wednesday. The bank did not name the service provider, Reuters reported.

Authorities were working to determine the attack’s origin and method, the bank said. The identity of those responsible and the amount ultimately recoverable had not been established in the reporting reviewed.

The group is based in Brittany in western France and serves more than 5.8 million customers, according to Reuters.

Where the banking group is based

The group is based in Brittany. The map marks the approximate Brest area for geographic context; it does not identify the location of the attack or any bank account.

★ Brest area in Brittany, approximate. Brittany location: Reuters. Map data: OpenStreetMap contributors, ODbL. Open map.

What is known so far

Dates are local to France.

November 4Arkéa publicly described the attack, temporary transfer delays and recovery work. Prosecutors received a complaint and opened an investigation, Reuters reported.
November 5The bank told Reuters that approximately €100 million was missing and that the recoverable amount remained uncertain.