Attackers reached the bank through an unnamed service-provider platform and moved institutional funds, making supplier-connected transaction authority the morning’s highest-priority control question.
What changed
Crédit Mutuel Arkéa says attackers reached the bank through an unnamed service provider’s platform and used the bank’s own account to make fraudulent transfers. Attackers reached the bank through an unnamed service-provider platform and moved institutional funds, making supplier-connected transaction authority the morning’s highest-priority control question.
Public record through 2026-11-06. Source references count citations across published briefings, including repeated sources. Explore the record and its limits →
What We Publish / What We Sell
D
Free · Public
The Daily
Five evidence-backed selections for security leaders, every weekday.
Security.io editorial assessments on a 0–100 scale. Exposure measures repeatability across supplier-connected payment paths; Urgency measures immediate control-review needs; Business consequence reflects realised financial loss and operational interruption. These are not source-provided metrics. Exposure: 84. Urgency: 94. Business consequence: 98. Focus the chart and use the up and down arrow keys for detail. Source: Security.io editorial scoring based on the cited Crédit Mutuel Arkéa disclosure and independent reporting.