The Crédit Mutuel Arkéa hack resulted in the theft of more than 100 million euros, without affecting customer deposits, and part of the funds has since been recovered. The attack, carried out through an external service provider, highlights the risks associated with connections granted to third parties, particularly in open banking and cloud environments. Unauthorized banking transactions must in principle be reimbursed, except in cases of fraud or serious negligence by the customer, while the FGDR covers up to 100,000 euros per depositor and per bank. The European DORA regulation, in force since January 2025, requires banks to strengthen their cybersecurity and better monitor their service providers, but expert Anis Haboubi considers it insufficient. The traceability of blockchain transactions made it easier to block part of the suspected funds, without guaranteeing their full recovery.
Source: Read the original article
