# Cyberattack at Crédit Mutuel Arkéa: fraudulent transactions > On November 4, 2026, the banking group Crédit Mutuel Arkéa announced it had been the victim of a cyberattack that enabled fraudulent transactions. The following day, economic columnist Nicolas Doze commented on this cyberattack, stating that it lasted several days before being revealed and is now over. He also raised the question of protecting savers' money. **In brief**: Ongoing story bringing together 2 events nationwide, followed from 4 November 2026 to 13 November 2026. 87 articles from 32 sources (cyber); last updated on 13 November 2026 at 16:20. - Status: ongoing - Category: Cyber - Place: Nationwide - First detected: 4 November 2026 at 10:47 - Updated: 13 November 2026 at 16:20 - Web page: https://acturadar.com/en/stories/336-cyberattack-at-credit-mutuel-arkea-fraudulent-transactions ## Reported figures - 100 millions d'euros - 133 millions de dollars - 30 millions - 118 millions d’euros - 100 millions de dollars ## Coverage angles The three political sides cover the same hack of Crédit Mutuel Arkéa, but the left emphasizes the vulnerability of the banking system and risks to savers, the center mainly relays the reassuring narrative from executives, and the right highlights the facts and the amount of damage. **Common ground** - Crédit Mutuel Arkéa confirmed on November 4, 2026, that it had been the victim of a cyberattack enabling fraudulent transactions. - The diverted amount is estimated at over 100 million euros (approximately 118 million euros, or more than 133 million dollars). - The incident is presented as now under control. - Executives state that no individual accounts were affected. **Differences** - The left highlights concerns about the protection of savers' money and sector vulnerability, while the center and right relay the reassuring message from executives. - The center and right frequently cite statements from President Julien Carmona and Daniel Baal, an angle less present on the left. - The left mentions the role of AI and a 'heist 2.0', elements absent from the provided center and right articles. ## Background _Context and reference points, separate from the story’s news; every item links to its source._ **Context figures** - CREDIT MUTUEL ARKEA (SIREN 775 577 018): large enterprise, founded in 1900, headquartered in Le Relecq-Kerhuon (29), sector 'financial and insurance activities', 5,000 to 9,999 employees (2024), 403 branches open in France. No announcement of collective proceedings published in Bodacc since 2008. ([Insee (répertoire Sirene) et DILA (Bodacc), 2026](https://annuaire-entreprises.data.gouv.fr/entreprise/775577018)) **Key terms** - **Cyberattack**: An offensive act conducted in cyberspace against an IT device or information system. Since 2017, the Official Journal of the French Republic defines it as 'a coordinated set of actions carried out in cyberspace targeting information or the systems processing them, impairing their availability, integrity, or confidentiality', specifying that it 'can be isolated or extend over time'. ([Wikipédia](https://fr.wikipedia.org/wiki/Cyberattaque)) - **Phishing**: A fraud technique, also known as spear phishing or baiting, which consists of making the victim believe they are addressing a trusted third party—bank, administration, company—to extract personal information such as a password or credit card number. It can occur via a fake website, email, or social media message, and is called SMiShing when it uses SMS. ([Wikipédia](https://fr.wikipedia.org/wiki/Hame%C3%A7onnage)) - **Cybermalveillance**: The source provided deals with cybersecurity, defined as the totality of laws, policies, tools, devices, concepts and security mechanisms, risk management methods, actions, training, best practices, and technologies intended to protect people and IT assets of states and organizations. It does not provide a specific definition of the term 'cybermalveillance'. ([Wikipédia](https://fr.wikipedia.org/wiki/Cybers%C3%A9curit%C3%A9)) **Useful resources** - [Cybermalveillance.gouv.fr](https://www.cybermalveillance.gouv.fr/) — cybermalveillance.gouv.fr: Assistance for victims of fraud and computer attacks. - [Porter plainte](https://www.service-public.gouv.fr/particuliers/vosdroits/F1435) — service-public.fr: Steps to file a complaint (police station, gendarmerie, prosecutor, online). ## Timeline (2 events) ### 4 November 2026 — [Crédit Mutuel Arkéa victim of a cyberattack enabling fraudulent transactions](https://acturadar.com/en/events/9069-credit-mutuel-arkea-victim-of-a-cyberattack-enabling-fraudulent-transactions.md) The Crédit Mutuel Arkéa banking group announces it was victim of a cyberattack that enabled fraudulent transactions. 32 sources, 86 articles · Nationwide ### 5 November 2026 — [Cyberattack: security of savers' money in question](https://acturadar.com/en/events/10085-cyberattack-security-of-savers-money-in-question.md) Economic columnist Nicolas Doze looks back on a cyberattack that lasted several days before being revealed, now over, and on the protection of savers' money. 1 sources, 1 articles · Nationwide --- Cite as: Acturadar, “Cyberattack at Crédit Mutuel Arkéa: fraudulent transactions”, https://acturadar.com/en/stories/336-cyberattack-at-credit-mutuel-arkea-fraudulent-transactions Methodology: https://acturadar.com/en/methodology