Major French bank hit by $133M crypto theft, suspect not linked to Lazarus Group

Cybersecurity researcher ZachXBT reported that Crédit Mutuel Arkéa suffered a breach resulting in losses exceeding $133 million. He stated there is strong evidence the attacker is unrelated to North Korea’s Lazarus Group, suggesting a different threat actor may be behind the attack. The incident highlights ongoing vulnerabilities in financial systems despite increasing digital security measures.

Crédit Mutuel Arkéa, a major French financial institution, experienced a significant cybersecurity breach resulting in the theft of over $133 million in cryptocurrency. The incident was reported by cybersecurity researcher ZachXBT, who identified the attack as distinct from previous high-profile breaches linked to state-sponsored actors. Notably, there is strong evidence indicating the perpetrator is not connected to North Korea’s Lazarus Group, a known cybercriminal collective frequently implicated in large-scale digital heists. This distinction suggests the emergence of a new or different threat actor operating within the financial cybersecurity landscape. The attack underscores persistent vulnerabilities in even well-resourced banking systems, despite ongoing investments in digital security infrastructure.

The background to this event lies in the increasing sophistication and frequency of cyberattacks targeting financial institutions globally. While earlier breaches—such as those attributed to Lazarus Group—have often involved ransomware or stealthy data exfiltration, this incident highlights a shift toward direct asset theft via cryptocurrency. ZachXBT’s analysis, based on technical indicators and attack patterns, points to a different modus operandi than that of state-backed groups. The specific methods used in the Crédit Mutuel Arkéa breach remain undisclosed, but the fact that it succeeded despite existing safeguards raises concerns about detection gaps and response p