Kraken thwarts insider extortion, client funds secure
6.6 Security Kraken faced an extortion attempt after two insider incidents exposed limited data from 2,000 accounts. No breach or fund risk occurred. Kraken refused to pay, notified users, and tightened security.
Kraken, a leading crypto exchange, recently faced an extortion attempt following two insider-related incidents. Support staff accessed limited client data, affecting around 2,000 accounts—about 0.02% of Kraken’s user base. Importantly, no client funds or core systems were compromised during these events. Kraken responded promptly by revoking access for those involved, notifying affected users, and strengthening internal security controls. The extortionists threatened to release videos allegedly showing internal systems with client data unless their demands were met, but Kraken refused to negotiate or pay. The company is cooperating with law enforcement and industry security experts, emphasizing that its systems were never breached and client funds remained secure. These incidents, first discovered in February 2025 and again more recently, highlight the ongoing risks of insider threats in the crypto industry.
