# Cyberattack at Crédit Mutuel Arkéa: fraudulent operations > On November 4, 2026, the banking group Crédit Mutuel Arkéa announced it had been the victim of a cyberattack that enabled fraudulent operations. The following day, economic columnist Nicolas Doze reviewed this cyberattack, noting that it lasted several days before being revealed and is now over. He also raised the question of protecting savers' money. **In brief**: Ongoing story bringing together 2 events nationwide, followed from 4 November 2026 to 5 November 2026. 69 articles from 32 sources (cyber); last updated on 5 November 2026 at 23:00. - Status: ongoing - Category: Cyber - Place: Nationwide - First detected: 4 November 2026 at 10:47 - Updated: 5 November 2026 at 23:00 - Web page: https://acturadar.com/en/stories/336-cyberattack-at-credit-mutuel-arkea-fraudulent-operations ## Reported figures - 100 millions d'euros - 133 millions de dollars - 30 millions - 118 millions d’euros - 100 millions de dollars ## Coverage angles The three sides cover the cyberattack from different angles: the left emphasizes the scale of the diversion and the vulnerability of banks, the center focuses on the security of savers' money and the investigation, and the right highlights the bank's confirmation and the lack of consequences for customers. **Common ground** - The Crédit Mutuel Arkéa bank confirmed it had been the victim of a cyberattack enabling fraudulent operations. - The amount of damage is estimated at more than 100 million euros (or dollars depending on the media). - The incident is presented as now under control. - The bank states that customer accounts are not affected. **Differences** - The left emphasizes the vulnerability of European banks and risks to savings, while the right insists on the lack of consequences for customers. - The center mentions an open investigation entrusted to the Anti-Cybercrime Office, a detail rarely mentioned by the right. - The left mentions interviews on risks related to AI, absent from right-wing articles. - Cited amounts vary: 118 million euros for several left- and right-wing media, more than 100 million euros for the center, and 133 million dollars for some. ## Background _Context and reference points, separate from the story’s news; every item links to its source._ **Context figures** - CREDIT MUTUEL ARKEA (SIREN 775 577 018): large enterprise, founded in 1900, headquarters in Le Relecq-Kerhuon (29), sector "financial activities and insurance", 5,000 to 9,999 employees (2024), 403 branches open in France. No announcement of collective proceedings published in Bodacc since 2008. ([Insee (répertoire Sirene) et DILA (Bodacc), 2026](https://annuaire-entreprises.data.gouv.fr/entreprise/775577018)) **Key terms** - **Cyberattack**: An offensive act carried out in cyberspace against an IT device or information system. Since 2017, the Official Journal of the French Republic defines it as "a coordinated set of actions carried out in cyberspace targeting information or the systems processing them, thereby compromising their availability, integrity, or confidentiality," specifying that it "can be isolated or extend over time." ([Wikipédia](https://fr.wikipedia.org/wiki/Cyberattaque)) - **Phishing**: A fraud technique, also known as hameçonnage or filoutage, which consists of making the victim believe they are addressing a trusted third party—bank, administration, company—to extract personal information such as a password or credit card number. It can occur via a fake website, email, or social media message, and is called SMiShing when it uses SMS. ([Wikipédia](https://fr.wikipedia.org/wiki/Hame%C3%A7onnage)) - **Cybermalveillance**: The provided source deals with cybersecurity, defined as the totality of laws, policies, tools, devices, concepts, and security mechanisms, risk management methods, actions, training, best practices, and technologies intended to protect people and IT assets of states and organizations. It does not provide a specific definition of the term "cybermalveillance." ([Wikipédia](https://fr.wikipedia.org/wiki/Cybers%C3%A9curit%C3%A9)) **Useful resources** - [Cybermalveillance.gouv.fr](https://www.cybermalveillance.gouv.fr/) — cybermalveillance.gouv.fr: Assistance for victims of fraud and computer attacks. - [Porter plainte](https://www.service-public.gouv.fr/particuliers/vosdroits/F1435) — service-public.fr: Steps to file a complaint (police station, gendarmerie, prosecutor, online). ## Timeline (2 events) ### 4 November 2026 — [Crédit Mutuel Arkéa victim of a cyberattack enabling fraudulent transactions](https://acturadar.com/en/events/9069-credit-mutuel-arkea-victim-of-a-cyberattack-enabling-fraudulent-transactions.md) The Crédit Mutuel Arkéa banking group announces it was victim of a cyberattack that enabled fraudulent transactions. 32 sources, 68 articles · Nationwide ### 5 November 2026 — [Cyberattack: security of savers' money in question](https://acturadar.com/en/events/10085-cyberattack-security-of-savers-money-in-question.md) Economic columnist Nicolas Doze looks back on a cyberattack that lasted several days before being revealed, now over, and on the protection of savers' money. 1 sources, 1 articles · Nationwide --- Cite as: Acturadar, “Cyberattack at Crédit Mutuel Arkéa: fraudulent operations”, https://acturadar.com/en/stories/336-cyberattack-at-credit-mutuel-arkea-fraudulent-operations Methodology: https://acturadar.com/en/methodology