Arkéa Bank Incident: Attack Overview and Crypto Tracing Insights

Arkéa Bank Responds to Cyber Attack Amidst Ongoing Investigations

In a recent statement, Arkéa Bank has sought to reassure customers following a cyber attack that has raised concerns about the security of its online banking operations. The bank firmly denied that the breach originated from its online banking subsidiary, Fortuneo, and emphasized that customer accounts remained unaffected.

Describing the incident as contained, Arkéa stated that precautionary measures were implemented, including the suspension of certain transactions. The bank has since resumed almost all operations, bolstered by enhanced security protocols.

While Arkéa has not confirmed reports of €118 million ($133 million) being stolen, it acknowledged that some funds had been blocked and recovery efforts were underway. The bank clarified that the amount involved in fraudulent transactions does not necessarily equate to its final loss, as blocked funds and successful recoveries could mitigate the impact. Arkéa reassured stakeholders that its financial stability remains intact.

In a parallel investigation, blockchain analytics firm Bitquery reported tracing $108.8 million in USDC withdrawals linked to wallets associated with major cryptocurrency exchanges, including Kraken, Crypto.com, and OKX. These transactions occurred over a 21-hour period from November 1 to November 2, but Bitquery noted that it could not independently verify the connection between the bank and the crypto exchanges, nor identify the owners of the receiving accounts.

Arkéa has confirmed that attackers utilized its own accounts to facilitate transactions to other banks, potentially allowing for conversion into cryptocurrency through specialized platforms. However, the bank has not disclosed any definitive figures regarding the losses or confirmed any links to crypto conversion.

As investigations continue, Arkéa is collaborating with judicial and police authorities to ascertain the origins and methods of the attack. The situation remains fluid, with both the bank and external analysts working diligently to piece together the events surrounding this significant security breach.

As the digital landscape evolves, the incident serves as a stark reminder of the vulnerabilities that financial institutions face in an increasingly interconnected world. Arkéa’s proactive measures and ongoing investigations will be crucial in restoring customer confidence and safeguarding against future threats.