French banking group Arkéa has told customers their holdings were not affected after the institution suffered an attack. The bank says most of its operations have since resumed, though key questions about the incident remain unanswered.
Arkéa says customer holdings were unaffected
Arkéa, the French cooperative banking group, stated that customer holdings were not impacted by the attack. The bank issued this assurance directly to its clients as it worked to restore normal service. For related coverage, see Kraken Pro Unified Wallet: EEA Spot Holdings and Futures Risk.
It is important to treat this statement as the bank’s own claim rather than an independently verified conclusion. No third-party audit or regulatory confirmation of the holdings status has been reported at this stage. Context on this theme: Ripple Says OCC Gives Final Approval to National Trust Bank.
The attack reportedly involved $133 million. For context, that figure describes the scale of funds at risk during the incident, not necessarily losses confirmed by the bank. Arkéa has not publicly confirmed any specific loss amount tied to crypto assets. More on this in How to File Crypto Taxes Before Year-End 2026: A Beginner Guide.
Most Arkéa operations resume after the attack
The bank confirmed that most of its operations have resumed following the incident. Transfer services, which were disrupted during the attack, have come back online according to reporting from CryptoSlate.
The word “most” matters here. It signals that some services or systems may still be under recovery or review. Arkéa has not provided a full breakdown of which operations remain affected.
When a bank confirms partial resumption after an attack, it typically means core payment infrastructure is back while backend investigation, forensic audits, and security hardening continue in parallel. This pattern is common in incidents affecting financial institutions, as seen in past cases where exchanges and banks moved quickly to restore user-facing services before completing internal reviews.
What Arkéa has disclosed and what remains unclear
Two facts have been stated by Arkéa: customer holdings were not affected, and most operations have resumed. Those are the confirmed disclosures as of this report.
What remains unknown is significant. The identity of the attacker, the method used, the exact systems compromised, the timeline of the breach, and whether any customer data was exposed have not been publicly confirmed. The question of crypto-specific losses also remains open. CryptoSlate noted that Arkéa left its crypto loss unconfirmed even as it resumed transfers.
This kind of partial disclosure is typical in the early stages of a financial institution’s incident response. Banks face regulatory obligations around disclosure timing and often cannot share full details while law enforcement or internal investigations are ongoing.
Security incidents involving financial institutions with crypto exposure raise broader questions about how traditional banks manage digital asset risk. The issue of hacking risks in crypto-adjacent finance has drawn increasing attention as more banks integrate digital asset services. For anyone holding funds at a bank that also handles crypto, understanding the distinction between “customer holdings unaffected” and “no losses occurred” is worth keeping in mind.
If you hold an account with Arkéa or a related Crédit Mutuel entity, the most reliable step is to monitor official communications from the bank directly. Arkéa has indicated it will provide updates as the situation develops. No action is required based on what has been disclosed so far, but watching for further official statements is sensible until a full incident report is published.
Sources: cryptoslate.com.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
