Kraken, a prominent US-based cryptocurrency exchange with over 13 million registered users, has recently confirmed that it faced an extortion attempt following two incidents involving insider data access. However, the exchange has reassured its users that there was no breach to its systems and that customer funds remained secure throughout these events.
What happened during the incidents? The recent security update unveiled by Kraken’s Chief Security Officer revealed that the incidents involved unauthorized access affecting roughly 2,000 accounts. This access was specifically related to client support systems, and Kraken emphasized that it swiftly acted to mitigate any potential issues. The first incident emerged in February 2025, when Kraken learned of a video circulated on a criminal forum hinting at unauthorized access to its client support systems. The company promptly identified the responsible support team member, revoked their access, and notified the affected clients while enhancing security measures.
A second tip led to the identification of another support team member linked to similar activities. As part of its due diligence, Kraken acted decisively to terminate this individual's access and reinforced its security protocols. Despite the incidents impacting a mere 0.02% of its user base, Kraken remains vigilant and ready to confront any threats to its platform.
Following the cutoff of access, Kraken encountered extortion demands from the perpetrators, who threatened to disclose sensitive information to the media and social platforms unless their demands were met. Kraken refused to negotiate with the extortionists, standing firm in its commitment to customer security.
To combat these threats effectively, Kraken has been collaborating with industry partners and federal law enforcement agencies across multiple jurisdictions. This collaborative effort is aimed at investigating broader insider recruitment efforts that target not only the crypto sector but also gaming and telecommunications companies.
Kraken asserts its confidence in its findings and believes it has collected sufficient intelligence to assist in identifying and potentially arresting the individuals responsible for these criminal actions. However, due to the ongoing nature of the investigation, specific details remain undisclosed. The firm continues to prioritize the safety of its clients and the integrity of its systems, reinforcing its commitment to cybersecurity in a rapidly evolving digital landscape.