Hackers drained more than $133 million from French bank Crédit Mutuel Arkéa through a contractor and laundered it in crypto within hours, the same week 33 governments urged households to stockpile food, water and cash. Brazil saw the same playbook in 2025.
PARIS — Crédit Mutuel Arkéa, a French cooperative banking group with roughly 5.8 million customers, confirmed on Nov. 4 that hackers carried out “fraudulent operations” through its systems. Blockchain investigator ZachXBT, who first named the bank, puts the loss at more than $133 million (about €118 million). The bank said it could validate the “order of magnitude” of that estimate and that no customer will lose money.
In the same week a bank lost $133 million in hours, 33 governments told their citizens to keep food and water at home. Each event has an official explanation. Nobody has explained why they keep arriving together.
According to the bank’s own follow-up statement, the attackers did not touch customer accounts. They came in through the platform of a third-party service provider and used Arkéa’s own treasury account to wire money to other banks. From there, the funds landed in exchange accounts reportedly opened under falsified identities. Blockchain analytics firm Bitquery traced about $108.8 million in USDC leaving Kraken, Crypto.com and OKX in 21 hours on Nov. 1 and 2. Part was swapped into roughly 27,000 ether within hours, and part was pushed through cross-chain bridges and into Monero, a coin built to defeat tracing. ZachXBT criticized the bank’s slow disclosure, arguing it gave the thieves time to launder tens of millions more.
Why it matters
The Arkéa hack is not an isolated headline. It lands in a season of official warnings. On Oct. 22, Britain launched its “Be Ready” campaign, urging families to store three liters of water per person per day, nonperishable food, power banks and cash for at least three days of disruption, as Fortune reported. In Washington, the Pentagon’s FORTRESS initiative ordered major U.S. bases to plan for 90 days of operation without the grid. “Power is combat now,” Pentagon spokesman Sean Parnell said. By early November, at least 33 countries, including Germany, France and the Nordic states, had issued guidance telling households to stockpile essentials, citing cyberattacks and threats to critical infrastructure. Europe already knows what that looks like: in January, an arson attack on cables over Berlin’s Teltow Canal left about 45,000 households in the dark for five days, with heating gone in freezing weather.
Read together, the pattern is clear enough. Money, electricity and food supply now run on the same fragile chain of contractors and networks, and governments are quietly preparing citizens for the day one link breaks.
Brazil has already seen this movie
Brazilian readers should recognize the Arkéa playbook. On July 1, 2025, criminals entered C&M Software, a contractor that connects smaller institutions to the Central Bank and to Pix, and drained reserve accounts of at least six financial firms. Police said BMP alone lost about R$540 million, and estimates of the total passed R$1 billion, much of it converted into crypto within hours. A C&M employee confessed to selling his login for R$15,000. Same vector, same exit route, a year before Arkéa. And in August 2023, a single failure blacked out 25 states and the Federal District.
The record
Confirmed by the bank: the attack, its third-party entry point and the order of magnitude of the loss. Reported by ZachXBT and Bitquery: the $133 million figure and the crypto trail. Officials in London, Paris and Berlin describe the stockpiling guidance as standard resilience planning, not a response to a specific threat.
That reassurance would carry more weight if the warnings were not multiplying at the same speed as the attacks. Under the Lula regime, Brazil’s payment system, among the most digitized in the world, has already proven it can be emptied through one contractor’s password, and the regime has offered no public accounting of what changed after C&M. The question for Brazilians, and for the Americans who invest alongside them, is no longer whether the next breach comes, but who will be holding cash, water and food when it does. See also our coverage of Turkey’s collapsed lira as a warning for Brazil and investors fleeing Brazil.
The Watch Post Daily will continue to follow this story. Sources: Crédit Mutuel Arkéa statements; ZachXBT; Bitquery; CoinDesk; Ledger Insights; Fortune; Brazil’s Civil Police and Central Bank on the C&M Software case.
Featured image: Siège du Crédit Mutuel Arkéa au Relecq-Kerhuon by FJaffres, via Wikimedia Commons, CC BY-SA 4.0.
COMMENTS