Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

Become a sponsor

One slot: pwn.watch, gifs.so, flavors.design, kitze.io, every kitze repo, and an X shout-out.

Secure checkout on Polar. Right after paying you set up your ad on kitze.io.

LiveHighPartly patchedBreaches & attacks

Crédit Mutuel Arkéa confirms a cyberattack that enabled fraudulent transactions

Crédit Mutuel Arkéa (banking systems)

Brought to you byTinkerer Club

The private club for people who own their servers, run their own AI, and pay $0/month for software.

French regional bank Crédit Mutuel Arkéa said on Nov 4 2026 that it detected a cyberattack which enabled fraudulent transactions. Management temporarily suspended some transactions to secure operations and prevent further fraudulent movements, and said clients would not suffer financial loss. Independent researcher ZachXBT and Le Télégramme reported about €118 million ($133 million) diverted; the bank has not confirmed that figure. AFP and Euronews relayed the bank's confirmation of fraudulent transactions without an official loss amount.

Why this severity: Bank-confirmed cyberattack with fraudulent transactions; ~€118M figure from ZachXBT/Le Télégramme is unconfirmed by the bank

Started
Nov 4, 2026

Follow this incident

Discuss on X ↗

Affected

  • Crédit Mutuel Arkéa customers during the fraudulent-transaction window (bank says clients are protected from loss)

Fixed in

  • Bank says the incident is under control and some transactions were temporarily suspended

Timeline1

  1. Crédit Mutuel Arkéa confirms a cyberattack that enabled fraudulent transactions, temporarily suspends some operations, and says clients will not suffer financial loss. ZachXBT/Le Télégramme cite ~€118M diverted; the bank does not confirm the amount.

News & write-ups2

Get an email when a new major security incident drops. No spam, unsubscribe any time.