Kraken Faces Extortion Attempt After Insider Access Incidents Affecting 2,000 Accounts

Cryptocurrency exchange Kraken has disclosed two insider-related incidents involving support staff who accessed internal systems and limited client data affecting approximately 2,000 accounts. Following these breaches, criminals obtained videos showing support staff accessing Kraken's internal systems and are now attempting to extort the company. Despite the security incidents and extortion attempt, Kraken maintains that no customer funds are at risk and has publicly stated it will not negotiate with the attackers. The case highlights ongoing vulnerabilities in cryptocurrency exchanges related to insider threats and the potential for such breaches to be weaponized through extortion.

Insider Access Incidents at Kraken

• ▪The insider access incidents at Kraken affected 2,000 accounts.
• ▪The insider access incidents at Kraken involved support staff.
• ▪Kraken disclosed two insider-related support access incidents involving limited client data.

Extortion Attempt and Security Threats

• ▪Attackers claimed to possess internal system videos from Kraken.
• ▪Kraken is facing an extortion attempt after attackers claimed to possess internal system videos.

Perspective of Kraken

• ▪Kraken will not negotiate with the criminals attempting to extort the exchange.
• ▪Kraken states that no customer funds are at risk from the insider access incidents.

3 sources