Crédit Mutuel Arkéa named as the French bank hit by a $133m service provider heist

Major Incidents and Breaches

Update The French bank behind the reported $133 million heist is cooperative lender Crédit Mutuel Arkéa. Attackers got in through a service provider and made fraudulent transactions, and the bank suspended some of its systems in response. (first reported 2026-11-06)^[1]
NHS staff who ran a breach helpline were given one day’s notice and then dealt with distressed callers and safeguarding decisions. The work, planned to last two weeks, stretched to 11 weeks and left the team carrying a ‘significant emotional burden’.^[2]

CTM360 reported fake gift card giveaways that impersonate major brands and celebrities. They use deceptive verification steps and affiliate networks to collect personal information and sign victims up for unwanted subscriptions, earning affiliate revenue rather than stealing credentials.^[3]