Kraken Refuses Extortion After Insiders Leaked Customer Support Data

Cryptocurrency exchange Kraken disclosed that a criminal group is attempting to extort the company using videos of internal systems displaying client data. The footage stems from an insider threat - support employees were recruited by the attackers to access customer information. Kraken says it identified and cut off the compromised employees after receiving external tips in February 2025 and more recently, and has notified affected users.

The exposure is relatively contained: roughly 2,000 accounts, or 0.02% of Kraken’s user base, had support-related data accessed. No funds were compromised and no external breach of Kraken’s systems occurred. The company has taken a hard line, refusing to pay or negotiate, and says it has collected enough evidence to pursue criminal prosecution across multiple jurisdictions with federal law enforcement.

The incident echoes a pattern hitting crypto exchanges hard. Coinbase disclosed a similar insider compromise in mid-2025 where bribed support contractors exposed data on 70,000 customers, costing an estimated $400 million. Malicious insider recruitment is becoming a go-to tactic for threat actors targeting high-value financial platforms.