Credit Mutuel Arkea says cyberattack involved about €100 million in fraudulent transactions

French bank Credit Mutuel Arkea said it was hit by a cyberattack. The bank put the sum linked to the attack at about €100 million. France 24 described the sum as fraudulent transactions, while Reuters described it as money missing.

According to Reuters, the attack took place this week. Reuters also reported that the bank said it could not yet say how much of the money it will be able to recover.

According to France 24, the bank said hackers gained access to Arkea's own account and made transfers to other banks.

France 24 and Reuters both attribute the core facts to Credit Mutuel Arkea. The story therefore rests on one underlying origin. The reports reviewed by Vocemundi do not include independent verification of the amount or of the bank's statement that clients suffered no losses.

What is disputed

• Day of the statement: France 24 says the bank made its statement on Wednesday. Reuters says it did so on Thursday. The reports may refer to separate statements, but they do not say so.
• Currency of the figure: France 24's headline says around $100 million was stolen. Its summary says around €100 million ($112 million). Reuters says about €100 million ($112.61 million).

What each side says

Credit Mutuel Arkea is the only party whose position appears in the reports. According to France 24, the bank said the attack has been "contained". France 24 also reported the bank as saying that the transfers were made from Arkea's own account, not from client accounts, and that clients did not suffer any losses.

What the reports do not say

• The reports do not identify who carried out the attack.
• They do not describe how the hackers gained access to Arkea's account.
• They do not give the exact date of the attack.
• They do not name the banks that received the transfers.
• They do not say whether any funds have been frozen or recovered.
• They do not say whether authorities have opened an investigation.

Analysis

The figures and the account of client impact rest on the bank's own statements, as relayed by two news organisations. If the transfers came only from Arkea's own account, as France 24 reports the bank saying, the direct cost may fall on the bank rather than its clients. The size of that cost could depend on how much money is recovered, which Reuters reports the bank cannot yet say. Independent findings, or details of any official inquiry, could confirm or change this picture. The reports reviewed by Vocemundi do not settle these questions.

Produced by the Vocemundi newsroom with AI assistance.