Arkéa says cyberattack used bank account for fraudulent transfers

Crédit Mutuel Arkéa said attackers accessed its systems through an unnamed service provider and used the French banking group’s own account to make fraudulent transfers to other financial institutions. The bank said customer assets were unaffected, while some transfers were delayed as it temporarily suspended certain operations and carried out security checks. Nearly all operations had resumed by November 4, it said. Arkéa has not confirmed a final loss. It said reported estimates reflected the approximate scale of the incident, but it could not yet say how much money would ultimately be recovered. Some funds had been blocked, and recovery efforts were continuing. The bank said the attackers first gained access through a service provider’s platform, rather than through its online banking subsidiary Fortuneo or customer accounts. It has not identified the provider. Arkéa described the intrusion as an external attack and said its security teams were assessing the breach and strengthening controls. The bank also said the incident would not threaten its financial strength or stability. The transfers originated from an account belonging to Arkéa, not accounts held by customers....