Crédit Mutuel Arkéa app down after cyberattack: what customers need to know

Published by My de Sortiraparis · Updated on November 4, 2026 at 03:56 p.m.
App inaccessible, transfers suspended: Crédit Mutuel Arkéa customers are having a difficult day this Wednesday, November 4, 2026, following a cyberattack that may have enabled more than €100 million to be diverted. The bank says its customers will suffer no financial consequences. Here’s what we know.

Bad news for Crédit Mutuel Arkéa customers this Wednesday, November 4, 2026. Since this morning, the bank’s app has been displaying an error message when users log in, and some transfers cannot be made. The cause: a cyberattack that enabled “fraudulent transactions,” the bank confirmed, according to AFP. The amount embezzled is said to exceed 100 million euros, but the group says its customers will suffer no financial consequences.

Here’s what we know this Wednesday afternoon, and what you should do if you’re a customer.

What happened at Crédit Mutuel Arkéa?

The group, headquartered in Le Relecq-Kerhuon, near Brest (29), confirmed on Wednesday that it had been the victim of a cyberattack that enabled “fraudulent transactions” to be carried out, according to Europe 1. The bank says the incident is “now under control.”

The case was first uncovered by ZachXBT, an independent cryptocurrency investigator. On November 2, he reported suspicious withdrawals totaling more than $106 million, before revising his estimate to more than $133 million, or around €118 million, reports Silicon. According to franceinfo, more than €100 million is believed to have been stolen and then converted into cryptocurrencies. The bank has confirmed no amount.

The precise details of the attack have not been disclosed. Several media outlets, including Presse-citron, citing anonymous sources, report that fraudulent transfers were made from Fortuneo, the group’s online bank, to accounts opened under false identities on cryptocurrency platforms. These details have not been officially confirmed.

Who is affected?

Crédit Mutuel Arkéa includes, among others, the Crédit Mutuel de Bretagne and Crédit Mutuel du Sud-Ouest federations, as well as several subsidiaries, including Fortuneo. It should not be confused with the rest of Crédit Mutuel and CIC, which belong to a different group: their customers are not affected by this incident at this stage.

The bank has not specified how many customers are unable to use the app or make transfers. The reported issues affect the group’s apps, so customers across France, including the Île-de-France region, may be affected, particularly Fortuneo customers.

Is my money at risk?

No, according to the bank. “We want to reassure all our customers: this incident has no financial impact on them,” a spokesperson told Capital. The money stolen therefore did not come from individual customers’ accounts, or the bank will cover the losses.

The bank also says it alerted the authorities and carried out its investigations. Some cryptocurrency platforms have already frozen some of the funds linked to the attack, according to Boursorama.

Why are the app and bank transfers no longer working?

As soon as it discovered the attack, the bank suspended certain transactions “as a precautionary measure” to secure its operations and prevent further fraudulent transfers. As a result, many customers have been unable to log in to the app or make transfers since Wednesday morning.

Operations are expected to resume “quickly, under optimal safety conditions” once the final checks have been completed, the group says. No date or time for a return to normal has been announced for now.

What should you do if you’re a customer?

Don’t panic, but a few precautions are in order over the coming days:

  • Plan ahead for urgent payments: if you need to make a transfer (rent, a tradesperson’s bill, a repayment), warn the recipient of a possible delay, or go through your branch.
  • Check your accounts as soon as access is restored, and report any transactions you don’t recognize to your adviser.
  • Beware of fake messages: scammers often take advantage of news like this to send fake texts, emails or calls “from your bank.” Your bank will never ask for your codes or ask you to approve a transaction you didn’t initiate.
  • Don’t click on links received by text or email: go directly to your bank’s official app or website.
  • If you’re unsure about a message, the Cybermalveillance.gouv.fr website can help you identify a scam and find out what to do.

It's not the first time

Major everyday services are regularly targeted by cyberattacks. In late December 2025, a cyberattack on La Poste disrupted Colissimo and La Banque Postale for several days. The Arkéa case stands out for the scale of the sums embezzled, among the largest ever reported at a French bank.

We will update this article as soon as the bank announces that its services have been restored.

Practical information

Dates and Opening Time
On November 4, 2026

× Approximate opening times: to confirm opening times, please contact the establishment.
    Comments