French bank says its own account was used in cyberattack

In an update on Wednesday, Arkéa said the attackers reached the bank through a service provider’s platform and used its own account to make transactions to other banks. It said they did not enter through its online banking subsidiary Fortuneo or use customer accounts.

Blockchain investigator ZachXBT estimated that at least €118 million had been stolen, according to French financial news site MoneyVox. Arkéa said it could confirm only the order of magnitude, not the figure itself. Some of the funds had been blocked and efforts to recover others were continuing, it said, making it too early to give a final amount.

The bank said the transactions may have allowed the attackers to convert the money into cryptocurrency. It is working with authorities to establish the precise origin and method of the attack.

Arkéa said it had temporarily suspended some transactions as a precaution and that the incident was now under control. It said nearly all operations had resumed during the morning, although some transfers had been delayed.

MoneyVox reported that Fortuneo customers had been warned through the bank’s app of possible disruption to instant transfers and Wero payments. Arkéa also warned customers to be alert to possible phishing attempts and not to share personal or banking details.