Archea, invaded through an external platform… Fortuneo route ruled out

Crédit Mutuel Arkéa confirmed that attackers breached its systems through a third-party service provider's platform and moved funds from the bank's own accounts to other banks, with the stolen money possibly converted into cryptocurrency via a specialist platform. The French bank said the incident did not run through its Fortuneo subsidiary and characterized it as an external attack rather than an employee error. The breach was earlier linked to a reported $133 million theft, and Arkéa has said no customer funds were lost. The disclosure matters because it shifts scrutiny onto third-party platform risk at banks and the role of crypto conversion in tracing stolen funds. What to watch next is whether the final loss figure is confirmed and how the third-party provider and crypto conversion path are identified.