Security · High impactFan score 3 · Tier D2 sources
Attackers Exploit Third-Party Provider to Raid French Bank Crédit Mutuel Arkéa
Security Affairs · By Pierluigi Paganini ·
The Brief · written from 2 sources
- Hackers used a third-party service provider to make fraudulent transactions from Crédit Mutuel Arkéa's own account, with losses of up to $133 million.
- Crédit Mutuel Arkéa, a French cooperative bank, was hit by the cyberattack and suspended certain systems in response.
- Security Affairs reported the bank's statement that the provider was exploited to carry out the theft.
Why it matters
The breach shows that a compromised third-party provider can give attackers direct access to a bank's accounts and move very large sums, so vendor access needs the same scrutiny as internal systems.
Who’s affected
- Banks and financial institutions that rely on third-party service providers
- #security
- #banking
- #supply-chain
- #third-party-risk
- #fraud
French Bank Crédit Mutuel Arkéa says hackers exploited a service provider to steal up to $133 million using the bank’s own account. French cooperative bank Crédit Mutuel Arkéa was hit by a cyberattack that let attackers make fraudulent transactions of up to $133 million, forcing…
Timeline
Attack on Crédit Mutuel Arkéa reported by BleepingComputer
BleepingComputer
Hackers pull off $133 million French bank heist via service provider
Security Affairs
Attackers Exploit Third-Party Provider to Raid French Bank Crédit Mutuel Arkéa