Kraken Support Panel Access Allegedly Sold on Dark Web: User Data at Risk?

Alleged read-only access to Kraken's internal support panel is reportedly for sale on dark web forums, raising concerns over potential exposure of user data and phishing risks. Kraken has not confirmed any breach.

Multiple reports have surfaced alleging that read-only access to Kraken's internal support panel is being offered for sale on dark web forums. The listings claim that buyers could view user profiles, transaction histories, and full KYC documents, including identification cards, selfies, proof of address, and sources of funds. The alleged access is said to allow the generation of support tickets, potentially enabling phishing attempts or extraction of sensitive information. Sellers claim the access is valid for one to two months, is proxied through Kraken's infrastructure, and is not restricted by IP address. While these claims have raised significant concerns about potential data exposure and targeted attacks, no independent cybersecurity firm has verified the authenticity of the breach, and Kraken has not confirmed any unauthorized access. The exchange states it employs layered access controls, real-time monitoring, and AI-driven analytics to protect customer data. Security experts urge users to enable additional security measures and exercise caution with support communications. The situation highlights ongoing risks of social engineering and the importance of robust security practices for centralized exchanges.