[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjHAdSVFI3EQX9LgIlm7iHifblpr34LTs-v11WphW-Ec":3},{"article":4,"iocs":36,"watch_terms":37,"solutions":38,"lesson":128},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"39ed311a-3175-4e32-b0b9-2632dab975fd","Hackers Steal Around €100 Million From Crédit Mutuel Arkéa Through Supplier Platform","hackers-steal-around-100-million-from-credit-mutuel-arkea-through-supplier-platf-ef43df","Hackers stole around €100 million from Crédit Mutuel Arkéa through a supplier platform. Customer funds were unaffected, and…","Crédit Mutuel Arkéa has lost approximately €100 million due to a cyberattack that exploited a third-party supplier platform. Attackers used the bank's own accounts for fraudulent transfers, potentially converting funds to cryptocurrency. While customer funds were unaffected, recovery efforts are ongoing, and French authorities have launched an investigation.","Hackers stole around €100 million from Crédit Mutuel Arkéa via a supplier platform.","https:\u002F\u002Fhackread.com\u002Fhackers-steal-e100m-credit-mutuel-arkea-supplier-platform\u002F","https:\u002F\u002Fhackread.com\u002Fwp-content\u002Fuploads\u002F2026\u002F11\u002Fhackers-steal-E100m-credit-mutuel-arkea-supplier-platform.jpg","2026-11-09T10:49:57+00:00","2026-11-09T11:00:23.602077+00:00",7,[17,20],{"name":18,"type":19},"Crédit Mutuel Arkéa","vendor",{"name":21,"type":22},"Fortuneo","product","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":23,"icon":25,"name":26,"slug":27},null,"Breaches","breaches",[29,31],{"category":30},{"id":23,"icon":25,"name":26,"slug":27},{"category":32},{"id":33,"icon":25,"name":34,"slug":35},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,21],{"controls":39,"vendors":127},[40,69,98],{"slug":41,"name":42,"problem":43,"products":44},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[45,53,61],{"vendor_slug":46,"vendor_name":47,"vendor_logo":48,"product_slug":49,"product_name":50,"url":51,"description":52},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-privileged-access-management","Idira Privileged Access Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fhuman\u002Fprivileged-access-management","Privileged access management from the former CyberArk portfolio: vaulting, rotation, just-in-time access and session monitoring.",{"vendor_slug":54,"vendor_name":55,"vendor_logo":56,"product_slug":57,"product_name":58,"url":59,"description":60},"wallix","WALLIX","\u002Fvendor-logos\u002Fwallix.png","wallix-pam","WALLIX PAM","https:\u002F\u002Fwww.wallix.com\u002Fproducts\u002Fprivileged-access-management-software\u002F","Privileged access management with session recording, for IT and OT environments.",{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},"beyondtrust","BeyondTrust","\u002Fvendor-logos\u002Fbeyondtrust.png","password-safe","BeyondTrust Password Safe","https:\u002F\u002Fwww.beyondtrust.com\u002Fproducts\u002Fpassword-safe","Privileged password and session management.",{"slug":70,"name":71,"problem":72,"products":73},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[74,82,90],{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"slug":99,"name":100,"problem":101,"products":102},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[103,111,119],{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"upguard","UpGuard","\u002Fvendor-logos\u002Fupguard.png","upguard-vendor-risk","UpGuard Vendor Risk","https:\u002F\u002Fwww.upguard.com\u002Fproduct\u002Fvendor-risk","Supplier security questionnaires, ratings and continuous monitoring.",{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":115,"product_name":116,"url":117,"description":118},"bitsight","Bitsight","\u002Fvendor-logos\u002Fbitsight.png","bitsight-tprm","Bitsight Third-Party Risk Management","https:\u002F\u002Fwww.bitsight.com\u002Fproducts\u002Fthird-party-risk-management","Supplier assessments and continuous monitoring based on security ratings.",{"vendor_slug":120,"vendor_name":121,"vendor_logo":122,"product_slug":123,"product_name":124,"url":125,"description":126},"onetrust","OneTrust","\u002Fvendor-logos\u002Fonetrust.png","third-party-management","OneTrust Third-Party Management","https:\u002F\u002Fwww.onetrust.com\u002Fsolutions\u002Fthird-party-management\u002F","Supplier inventory, risk assessments and monitoring across privacy and security.",[],{"slug":129,"title":130,"body":131,"framework_refs":132,"framework_notes":140},"100m-bank-fraud-via-compromised-supplier-platform","€100M Bank Fraud via Compromised Supplier Platform","Attackers exploited a third-party supplier platform to gain access to Crédit Mutuel Arkéa's internal systems and initiated fraudulent transfers using the bank's own accounts, highlighting a critical failure in third-party risk management. The use of legitimate bank accounts for the transfers suggests attackers obtained valid credentials or session tokens through the supplier platform, bypassing direct bank defenses. This incident underscores how a trusted supplier relationship can become an invisible backdoor into even well-defended financial institutions. The conversion of funds to cryptocurrency further complicates recovery, illustrating why rapid detection and transaction monitoring are essential. Financial institutions must treat third-party platforms with the same scrutiny as their own internal systems.",[133,134,135,136,137,138,139],"CIS Control 15: Service Provider Management","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","DORA Article 9","NIS2 Article 21(2)(b)","CIS Control 17: Incident Response Management",{"DORA Article 9":141,"NIS2 Article 21(2)(b)":142,"NIST SP 800-53 SI-2: Flaw Remediation":143,"CIS Control 15: Service Provider Management":144,"CIS Control 17: Incident Response Management":145,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":146,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":147},"DORA mandates that financial entities implement ICT security measures for third-party ICT service providers, directly applicable to this incident where a supplier platform was the attack vector causing significant financial loss.","NIS2 requires incident handling and supply chain security measures, obligating entities like Crédit Mutuel Arkéa to assess and manage the cybersecurity risks posed by their third-party suppliers.","If the supplier platform contained exploitable vulnerabilities, a structured flaw remediation program requiring timely patching of third-party software would have reduced the attack surface.","This control requires organizations to establish and maintain a process to evaluate service providers, ensuring suppliers with access to systems meet defined security standards — directly addressing the failure to secure the third-party platform that was exploited.","A well-practiced incident response plan with pre-defined playbooks for fraudulent financial transfers could have accelerated detection, containment, and recovery, potentially limiting the total financial loss of €100 million.","This control requires organizations to manage technical vulnerabilities in a timely manner, including those present in supplier-managed systems that have access to the organization's environment.","Enforcing strong authentication and least-privilege access on the supplier platform integration would have prevented attackers from leveraging the bank's own accounts to conduct fraudulent transfers."]