French cooperative banking group Arkéa has assured customers that their holdings were not affected by a recent attack on the institution, adding that most of its operations have since resumed. The bank issued the statement as it worked to restore normal service, though several key questions about the incident remain unanswered.

Arkéa: Customer Holdings Were Not Impacted

In a direct communication to clients, Arkéa stated that customer holdings were not impacted by the attack. The assurance came as the bank worked to bring disrupted services back online.

At this stage, however, the statement should be treated as the bank's own claim rather than an independently verified conclusion. No third-party audit or regulatory confirmation of the status of customer holdings has been reported.

The attack reportedly involved $133 million. That figure describes the scale of funds at risk during the incident, not necessarily losses confirmed by the bank. Arkéa has not publicly confirmed any specific loss amount tied to crypto assets. Bridging that gap between the reported scale and the confirmed outcome is the key detail to watch as the bank's disclosures develop.

Most Operations Resume, Including Transfers

The bank confirmed that most of its operations have resumed following the incident. Transfer services, which were disrupted during the attack, are back online, according to reporting from CryptoSlate.

The word "most" is significant. It signals that some services or systems may still be under recovery or review, and Arkéa has not provided a full breakdown of which operations remain affected.

When a bank confirms a partial resumption after an attack, it typically indicates that core payment infrastructure has been restored while backend investigation, forensic audits, and security hardening continue in parallel. This pattern is common in incidents affecting financial institutions, with exchanges and banks historically moving quickly to restore user-facing services before completing internal reviews.

What Has Been Disclosed — and What Remains Unclear

Two facts have been stated by Arkéa: customer holdings were not affected, and most operations have resumed. Those are the confirmed disclosures as of this report.

What remains unknown is substantial. The identity of the attacker, the method used, the exact systems compromised, the timeline of the breach, and whether any customer data was exposed have not been publicly confirmed. The question of crypto-specific losses also remains open. CryptoSlate noted that Arkéa left its crypto loss unconfirmed even as transfers resumed.

Partial disclosure of this kind is typical in the early stages of a financial institution's incident response. Banks face regulatory obligations around the timing of disclosures and are often unable to share full details while law enforcement or internal investigations are ongoing.

Security incidents involving financial institutions with crypto exposure raise broader questions about how traditional banks manage digital asset risk, a topic that has drawn increasing attention as more banks integrate digital asset services. For anyone holding funds at a bank that also handles crypto, the distinction between "customer holdings unaffected" and "no losses occurred" is worth keeping in mind.

Customers with accounts at Arkéa or a related Crédit Mutuel entity are best served by monitoring official communications from the bank directly. Arkéa has indicated it will provide updates as the situation develops. No action is required based on what has been disclosed so far, but the most informative signals to watch are independent or regulatory confirmation of the status of customer holdings, a confirmed or revised crypto loss figure, a full breakdown of any operations still running in reduced form, and clarity on whether customer data was exposed. Until a full incident report is published, further official statements remain the most reliable source of information.

Source: CryptoSlate, via CoinLineup.

Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.