Crédit Mutuel Arkéa suffers supply chain breach and fund transfers

French regional banking group Crédit Mutuel Arkéa admitted on Wednesday that attackers had accessed an internal account and transferred funds to other financial institutions. CSO Online reported that the intruders gained access through an unnamed third-party service provider's platform. Crédit Mutuel Arkéa stated that the stolen funds could have subsequently been converted into cryptocurrency by the thieves. [1]

The unauthorized activity was initially detected on Monday by blockchain investigator ZachXBT, according to cryptocurrency news outlet CoinDesk. ZachXBT initially did not identify the victim, but he formally identified the entity involved as Crédit Mutuel Arkéa on Wednesday. [1]

A supply chain attack targets less secure elements within an organization's vendor or service network to compromise the primary target. These incidents can occur across software or hardware assets in various sectors, including financial services, energy, and government operations. [2]

As FTMQ Security reported earlier, France has recently faced other major cyber incidents impacting critical infrastructure, including an October 11 cyber attack on supermarket chains that forced operators to rapidly disconnect online refrigeration controllers. [3]