France is dealing with a wave of coordinated cyberattacks that cut across two very different types of institutions in the same week. One targeted money, and the other targeted something harder to replace.

France Faces Cyberattacks Against Its Banks

Crédit Mutuel Arkéa, one of France’s largest banking groups, confirmed it was hit by a cyberattack after hackers managed to carry out a series of fraudulent transactions that sent money out of the institution. The bank acknowledged the incident but declined to specify exactly how much was stolen, stating only that the amount is “not of a nature to undermine the Group’s financial strength and soundness.”

The figure being disputed publicly is significant. Blockchain investigator ZachXBT, who operates an independent crypto investigations channel on Telegram, identified Crédit Mutuel Arkéa as the suspected victim of a $133 million theft after tracking suspicious on-chain activity earlier in the week. He published those findings before the bank’s breach became publicly confirmed, suggesting he had already been monitoring the movement of funds ahead of the official disclosure.

Crédit Mutuel Arkéa disputed the $133 million figure reported by CoinDesk, pushing back on the total without providing an alternative number. Reuters reported the bank’s denial of that figure but could not independently verify what the actual sum was at the time of publication.

Hackers Target Financial Institutions Then Launder via Crypto

The method used to move the stolen money out of Crédit Mutuel Arkéa followed a pattern increasingly associated with sophisticated financial cybercrime. According to ZachXBT’s Telegram post on the investigation, funds were withdrawn from accounts at cryptocurrency exchanges in the form of USDC and USDT, two stablecoins pegged to the US dollar.

From there, the trail was deliberately obscured. Those funds were then laundered through a series of other cryptocurrencies and exchanges, with a critical step involving conversion into Monero, a privacy-focused cryptocurrency designed to make transaction history untraceable. Monero has become a preferred tool among cybercriminals for this exact reason: unlike Bitcoin, which maintains a transparent public ledger, Monero’s protocol is built to hide the sender, recipient, and amount of every transaction.

The incident is unfolding in the same climate as the recent $6.3 billion theft from crypto exchange Binance, which the FBI has attributed to North Korean state-sponsored hackers. While the Crédit Mutuel Arkéa attack has not been attributed to any specific group or nation-state, the use of privacy coins and cross-exchange layering in both cases reflects the same fundamental approach to converting stolen institutional funds into assets that are difficult for investigators to follow.

Hackers Also Targeted Blood Banks in France

A second and distinctly different type of attack hit France around the same time. Hackers targeted refrigeration systems at three sites used by France’s national blood service, with the goal appearing to be sabotage rather than theft.

The attackers gained access through a refrigeration contractor’s control systems. Once inside, they manipulated the temperature and defrost settings at three separate cold storage sites that housed blood products, raising temperatures to levels that could have degraded or destroyed the stored materials. French officials stated they were able to detect the changes and intervene in time to prevent any blood products from being lost.

No blood supply was ultimately compromised in the incident, but the nature of the attack has drawn considerable alarm. Blood products cannot be stockpiled on demand the way financial reserves can. If those supplies had been destroyed before the tampering was detected, the consequences for patients requiring transfusions, surgeries, or emergency care could have been severe and immediate.

The attack on critical medical infrastructure represents a qualitatively different category of threat from a financial heist, one where the harm is not measured in dollars but in the availability of a life-saving resource.

The refrigeration attack comes as a broader trend of hackers targeting non-financial critical infrastructure has accelerated globally. Earlier in the same week, Reuters reported that the US military was investigating a suspected cyberattack on commissary freezer systems at military bases, an attack that reportedly defrosted large quantities of food.

Both incidents highlight how industrial control systems and connected operational technology, which manage physical conditions rather than data, have become an increasingly attractive and underdefended target.

Frequently Asked Questions

What Is a Blood Bank?

A blood bank is a facility that collects, tests, processes, and stores donated blood and blood components for use in medical transfusions and surgeries. Modern blood banks manage several distinct products derived from whole blood donations, including packed red blood cells, platelets, plasma, and cryoprecipitate, each of which has specific storage temperature requirements to remain viable.

Red blood cells must be stored between 2 and 6 degrees Celsius, platelets between 20 and 24 degrees with continuous agitation, and plasma must be kept frozen, typically at or below negative 18 degrees Celsius. Because of these precise temperature requirements, the refrigeration and freezing infrastructure that blood banks rely on is considered critical medical equipment. Any disruption to that infrastructure, whether from equipment failure, power outages, or deliberate tampering of the kind carried out in France, poses a direct risk to the viability of stored blood products and to the patients who depend on them.

How Dangerous Is the Cyberattack?

The cyberattack on Crédit Mutuel Arkéa represents a significant financial incident whose full scale is still being determined, but the institution itself has stated the breach does not threaten the bank’s overall financial stability. For individual customers, the more immediate concern is typically whether their personal account data was exposed or whether fraudulent transactions occurred on their accounts, neither of which the bank had addressed in detail as of the latest reporting.

The refrigeration attack on France’s blood service infrastructure, while contained in this instance, illustrates the potentially severe consequences of such breaches when they succeed. Had officials not caught the temperature manipulation in time, blood products at three separate cold storage sites could have been destroyed, creating a supply crisis for hospitals and medical facilities that depend on that regional blood service. The attack on US military commissary freezers reported around the same time demonstrates that this type of industrial control system targeting is not isolated to France.

Why Are Blood Banks Also Targeted?

Blood banks and other critical medical infrastructure are increasingly attractive targets for hostile actors precisely because the potential consequences of disrupting them are so serious. Unlike a bank, which can freeze accounts and restore balances through internal reserves or insurance, a blood bank that loses its cold storage cannot recover its inventory once the temperature threshold has been exceeded.

That asymmetry gives attackers significant leverage with relatively minimal technical complexity: gaining access to a refrigeration contractor’s control system requires far less sophistication than breaching a major financial institution’s cybersecurity stack.

Attacks on critical infrastructure, including hospitals, water treatment facilities, and medical supply chains, have risen sharply in frequency since 2022, with both financially motivated criminal groups and state-sponsored actors using them as tools of disruption. France’s national blood service runs a network of collection, processing, and storage sites that supply hospitals across the country, making it a high-impact target where even a temporary disruption can have cascading effects on patient care.