French cooperative bank Crédit Mutuel Arkéa was hit by a cyberattack that enabled fraudulent transfers that reportedly reached €118 million (about $133 million), BleepingComputer reports.
What we know
- The bank says the attackers came in through the platform of one of its service providers, not through its Fortuneo subsidiary, and it hasn’t named the provider.
- They used the bank’s own account to send money to other banks, and it was then likely turned into crypto. Customer accounts and assets weren’t touched.
- Blockchain investigator ZachXBT flagged it first. The bank confirms the order of magnitude, but not the exact figure. Some funds have been frozen and recovery is under way.
- The bank calls it a sophisticated outside attack, not human error, and it’s warning customers to watch for phishing.
My take
This is the supply-chain lesson again: your third parties’ access is your attack surface. Know which vendors can move money or data for you, limit what they can reach, and watch their activity as closely as your own.
God Bless, and Happy hacking!
