Kraken Reports Extortion Attempt Amid Insider Data Breach

Crypto exchange Kraken has recently revealed incidents involving unauthorized access by its support staff, leading to an extortion attempt from a criminal group. The firm’s chief security officer provided insights about these unsettling events in a recent statement.

According to Kraken, there were no breaches of their systems, and client funds remained secure throughout the incidents. Both occurrences involved inappropriate access to internal support tools rather than the critical infrastructure used for trading. Once the unauthorized access was detected, Kraken promptly revoked it.

TRUSTED PARTNER

3.9 ★★★☆☆

Review and Opinions →

🔥 Bonus 1.400 $

Bonus Instant + 225 FS 🏆

Open an account

Nick Percoco, the Chief Security Officer, indicated that the attackers have claimed to possess videos that showcase internal client data. They threatened to unveil this information publicly unless their demands were met. Percoco reassured that Kraken would not yield to these criminals and emphasized that their systems are safe, stating that the company would not engage in negotiations with the extortionists.

Kraken reported that approximately 2,000 client accounts might have been viewed during these incidents. This number represents only a small fraction—about 0.02%—of their total global user base. Clients potentially affected by this exposure were promptly notified, and it was clarified that the accessed information pertained to support inquiries rather than sensitive financial data.

The first of the two incidents occurred in February 2025, when Kraken learned about a circulating video on a criminal forum. Subsequent investigations led to the identification of a member of their support team. A second event surfaced later, linked to another individual, prompting Kraken to tighten its internal controls.

Following these breaches, the attackers escalated their tactics by issuing extortion demands after they lost access to the compromised information. They threatened to share the incriminating content with media outlets and social media platforms.

In response to this disturbing situation, Kraken is collaborating with law enforcement agencies across various jurisdictions, believing they possess sufficient evidence to identify and pursue the culprits. The company pointed out that there’s a worrying trend of insider recruitment targeting sectors such as cryptocurrency, gaming, and telecommunications.

Security experts have highlighted that insider threats pose a significant risk in the digital asset landscape. Even with restricted access for support staff, the potential for coercion or exploitation remains high.

TRUSTED PARTNER

4.5 ★★★★☆

Review and Opinions →

🔥 Welcome Bonus 1.500$

150 FS 🏆

Open an account

To combat this, Kraken is actively reviewing its internal protocols, enhancing monitoring systems, and tightening access privileges to better safeguard sensitive information. They maintain that their core trading infrastructure has remained secure throughout both incidents.

This situation unfolds amidst ongoing security challenges in the crypto industry, which continues to grapple with threats from both external attacks and internal vulnerabilities. The lucrative nature of digital assets makes crypto platforms prime targets for coordinated efforts to exploit their weaknesses.

In a separate occurrence, Galaxy Digital also reported a cybersecurity issue involving unauthorized access to a standalone development environment, although they confirmed that no client data or funds were compromised.

As the investigation progresses, Kraken remains committed to working with investigators and industry partners. The company considers these incidents contained but warns of a broader pattern of insider threats that could impact tech firms across multiple sectors.