Crédit Mutuel Arkéa Says Attackers Drained Its Own Account, Possibly Cashed Out in Crypto

The distinction between the bank's own account and customer deposits is the key detail: this is a balance-sheet loss, not a customer-protection event, which changes how the incident is likely to be treated by supervisors and counterparties. The bank's refusal to confirm the reported figure while conceding the scale is 'about right' leaves the exact damage unresolved, and the crypto cash-out angle, if borne out, would put the case in the same enforcement lane as other recent exchange-linked thefts. Whether a formal loss figure is disclosed, and whether the crypto trail is confirmed, are the open questions worth watching.