Kraken Faces Extortion Threat, Says Client Funds Remain Safe

U.S. cryptocurrency exchange Kraken was targeted by a criminal group suspected of recruiting an employee to improperly access customer support data, then using the threat of releasing video of internal system operations to demand payment. The incident highlights the need for exchanges to manage employee access and social-engineering risks alongside external hacking threats. Kraken stressed that its core systems were not broadly compromised and client funds were never exposed.

Kraken said in its latest disclosure that the incident involved only limited support data from about 2,000 accounts and caused no loss of funds. It refused to negotiate with or pay the extortionists. The exchange did not disclose the ransom demand or the exact date of the unauthorized access. It has strengthened access controls, taken action against the insiders involved and is working with law enforcement to track down the criminal group.