Kraken is dealing with an extortion attempt linked to insider access incidents, but says user funds remain safe.
Quick Summary – TLDR:
- Kraken confirms extortion attempt tied to insider related data access.
- Around 2,000 user accounts were potentially viewed.
- Company says no system breach and no funds at risk
- Growing trend of insider threats and crypto related extortion cases.
What Happened?
Kraken disclosed that a criminal group is attempting to extort the exchange using videos that allegedly show internal systems and limited client data. The company said the incidents were linked to insider access rather than an external breach and confirmed that affected users have been notified.
Kraken Security Update
— Nick Percoco (@c7five) April 13, 2026
We are currently being extorted by a criminal group threatening to release videos of our internal systems with client data shown if we do not comply with their demands. It’s important to start with the most important points: our systems were never…
Insider Access Triggers Extortion Threat
Kraken revealed that the issue stems from two separate incidents of inappropriate access involving members of its support team. The first occurred in February 2025, while a second similar case happened more recently.
In both situations, individuals with internal access were able to view limited client data and record or expose internal systems. The company acted quickly by identifying those responsible and revoking access immediately.
Kraken stated that about 2,000 accounts were potentially impacted, representing a very small fraction of its global user base. Importantly, the company emphasized that its core systems were never breached and customer funds were never at risk.
Company Refuses to Pay Attackers
Kraken has taken a firm stance against the attackers. Chief Security Officer Nick Percoco said the company will not pay or negotiate under any circumstances.
According to the company, the extortion attempt began shortly after the latest insider access was shut down. The attackers are threatening to release videos to media outlets and social platforms unless their demands are met.
Kraken is now working closely with federal law enforcement and industry partners to investigate the case. The company believes there is enough evidence to potentially identify and arrest those responsible.
A Growing Pattern of Insider Threats
The incident highlights a broader issue in the crypto sector where insider risks are becoming a serious concern. Instead of relying only on technical exploits, attackers are increasingly targeting employees or contractors to gain access.
Kraken also noted ongoing efforts to uncover organized insider recruitment campaigns targeting not just crypto firms, but also gaming and telecommunications companies.
A similar case involved Coinbase, which reported an extortion attempt where attackers demanded $20 million after gaining access to user data through bribed support staff. That breach impacted tens of thousands of users.
Rising Losses and Sophisticated Attacks
Recent data shows that crypto related attacks are becoming more damaging. In March 2026 alone, losses reached $178 million, a sharp increase from the previous month.
One of the most common methods remains authorization abuse, where users unknowingly grant attackers access to their funds. At the same time, more advanced groups are combining social engineering with technical knowledge to exploit vulnerabilities.
Groups like Lazarus Group are known for planting insiders within companies, making detection even more difficult. Reports suggest dozens of affiliated individuals have infiltrated crypto projects over time.
SQ Magazine’s Takeaway
I think this story is a wake up call for the entire crypto industry. While companies often focus on external hacks, the real danger is shifting inside organizations. Kraken did the right thing by acting fast and refusing to give in, but the fact that insiders were involved shows how complex these threats have become. If this trend continues, security will not just be about code and systems, it will be about people and trust at every level.
