Kraken Rejects Extortion Demands Following Insider Data Access

Kraken, the U.S.-based cryptocurrency exchange, is currently resisting an extortion attempt from a criminal organization claiming to possess internal client data. The company confirmed that the threat followed two separate instances of unauthorized internal access by members of its support team. According to Nick Percoco, Kraken's chief security and information officer, the exchange's core systems were never breached and client funds remained secure throughout both events. The first incident occurred in February 2025, while the second was identified more recently; in both cases, the responsible individuals had their access revoked immediately. The company estimates that approximately 2,000 client accounts were potentially viewed, representing roughly 0.02% of Kraken's total customer base. Despite the threats to release videos and data to the media, Kraken has stated it will not negotiate with the bad actors. This event highlights a growing trend of 'insider recruitment' targeting the crypto, gaming, and telecommunications sectors. The incident coincides with a similar, though isolated, cybersecurity event at Galaxy Digital, where unauthorized access to a development workspace was contained without risking client funds. Kraken is currently collaborating with law enforcement and industry partners to track the perpetrators. The exchange continues to emphasize its commitment to security and regulatory compliance as it enhances its internal controls to mitigate human vulnerabilities.