# Hackers pull off $133 million French bank heist via service provider

Source: [BleepingComputer](https://www.bleepingcomputer.com/news/security/hackers-pull-off-133-million-french-bank-heist-via-service-provider/) · 2026-11-07 · Security
Page: https://themorning.dev/story/hackers-pull-off-133-million-french-bank-heist-via-service-provider-ded94754be202b29
Kind: security · Impact: high

## In brief

- Hackers used a third-party service provider to make fraudulent transactions from Crédit Mutuel Arkéa's own account, with losses of up to $133 million.
- Crédit Mutuel Arkéa, a French cooperative bank, was hit by the cyberattack and suspended certain systems in response.
- Security Affairs reported the bank's statement that the provider was exploited to carry out the theft.

## Why it matters

The breach shows that a compromised third-party provider can give attackers direct access to a bank's accounts and move very large sums, so vendor access needs the same scrutiny as internal systems.

## Timeline

- 2026-11-07: Attack on Crédit Mutuel Arkéa reported by BleepingComputer

## Coverage

- [Attackers Exploit Third-Party Provider to Raid French Bank Crédit Mutuel Arkéa](https://securityaffairs.com/202628/cyber-crime/attackers-exploit-third-party-provider-to-raid-french-bank-credit-mutuel-arkea.html) — Security Affairs, 2026-11-08
- [Hackers pull off $133 million French bank heist via service provider](https://www.bleepingcomputer.com/news/security/hackers-pull-off-133-million-french-bank-heist-via-service-provider/) — BleepingComputer, 2026-11-07

Tags: security, banking, supply-chain, third-party-risk, fraud

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev