Videos circulating on dark web forums have pulled crypto
exchange Kraken into an extortion attempt, but the company says no systems were
compromised and client funds remain secure. The firm claims a criminal group is
threatening to release internal footage to pressure the exchange into paying a
ransom.
Singapore Summit: Meet the largest APAC brokers you know (and those you still don’t!)
Insider Access Behind Data Exposure
Kraken discovered that two incidents involving insider
access to limited support data led to about 2,000 accounts being exposed,
representing just 0.02% of its client base. Investigations revealed that both
cases were tied to individuals within its support team, whose credentials were
immediately revoked once the activity came to light.
The first incident dates back to February 2025, when a video
showing internal systems appeared on a criminal forum. Kraken traced the clip
to an insider, tightened access controls, and informed affected users. A
similar event surfaced recently, prompting the same swift response from the
company.
“Our systems were never breached; funds were never at risk;
we will not pay these criminals,” said Nick Percoco, Chief Security and
Information Officer at Kraken, on X.
Kraken Security UpdateWe are currently being extorted by a criminal group threatening to release videos of our internal systems with client data shown if we do not comply with their demands. It’s important to start with the most important points: our systems were never…
— Nick Percoco (@c7five) April 13, 2026
Law Enforcement Probes and Industry Risks
Kraken said it is now working closely with law enforcement
and industry partners to investigate the extortion attempt, which it believes
is linked to broader efforts by criminal networks to recruit insiders across
crypto, gaming, and telecom firms.
The company stressed that its operations continue normally
and that new security measures are already in place to prevent similar
incidents. Insider threats have become a rising concern in the digital asset
industry, as cybercriminals increasingly target employees with system access
rather than directly attacking infrastructure.
This article was written by Jared Kirui at www.financemagnates.com.
Credit: Source link
