Crédit Mutuel Arkéa confirms a cyberattack that enabled fraudulent transactions
Teaser from the source
French regional bank Crédit Mutuel Arkéa said on Nov 4 2026 that it detected a cyberattack which enabled fraudulent transactions. Management temporarily suspended some transactions to secure operations and prevent further fraudulent movements, and said clients would not suffer financial loss. Independent researcher ZachXBT and Le Télégramme reported about €118 million ($133 million) diverted; the bank has not confirmed that figure. AFP and Euronews relayed the bank's confirmation of fraudulent transactions without an official loss amount. In a 17:30 follow-up the bank said attackers came in through a service provider's platform and moved money out of the bank's own account, not client accounts; it validated the order of magnitude of the reported loss and said part of the funds was blocked. That evening the bank gave a provisional estimate of about €100 million, and the Paris prosecutor opened an investigation led by the OFAC anti-cybercrime office.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on transactions
Other advisories
- Not ratedosv:CLEANSTART-2024-TX99377Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE
- Highosv:MAL-2026-18361Malicious code in mock-transactions-sdk (npm)
- Not ratedosv:CVE-2026-117601Electrum before 4.8.3 Missing Signature Verification of Mempool Transactions
- CriticalCVE-2026-117601Electrum wallet: malicious servers swap just-sent transactions and trick users into fee-bumping a payment to the attacker
- Not ratedosv:CVE-2026-104425Zebra before 6.1.0 Batch-Verification Poisoning DoS via Unattributed Pushed Transactions
- CriticalCVE-2026-85047Chromium CVE-2026-85047: Improper input validation in Transactions Platform
- MediumCVE-2026-95384Chromium CVE-2026-95384: Race condition in Transactions Platform
- MediumCVE-2026-95336Chromium CVE-2026-95336: Information leak in Transactions Platform
Other news entries
- Binance says a fake job interview started its $6.3B hack; it has rebuilt the affected wallet system and will cover all lossesBreachpwn.watch
- Avalanche Tranche Vault tied to Fence Finance and Valinor drained of 1.01M USDC in flash-loan exploitBreachpwn.watch
- Owner of Empire cybercrime market gets 40 years in prisonNewsBleepingComputer
- NCSC-2026-0341 [1.00] [M/H] Kwetsbaarheden verholpen in Google ChromeNewsNCSC-NL
- Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment SystemsNewsThe Hacker News
- AI agents gain access to financial workflows amid growing governance gapsNewsCSO Online
- Glassworm botnet disrupted after resilient C2 infrastructure takedownNewsBleepingComputer
- Coinbase: bribed support contractors leak data of 69,461 customers, $20M ransom refusedBreachpwn.watch
Source: https://pwn.watch/i/credit-mutuel-arkea-cyberattack-nov-2026