Kraken insider data breach attempt: no funds at risk amid extortion

Kraken said a “Kraken insider data breach attempt” and a follow-on extortion scheme did not put customer funds at risk. The exchange reported that a criminal group threatened to leak videos allegedly showing Kraken’s internal support systems and client data. Kraken Chief Security Officer Nick Percoco said the company shut down two separate cases of improper access involving limited customer support data. The first began in February 2025 after Kraken spotted a video circulating on a criminal forum. An internal investigation identified a support employee as the source, revoked their access, and notified a small number of affected clients. After access was removed, extortion demands started. A second similar attempt followed another tip and another video. Kraken again identified the individual, terminated access, completed investigations, and notified roughly 2,000 accounts (about 0.02% of its user base) potentially viewed across both incidents. For traders, the “Kraken insider data breach attempt” headline is mainly a reputational and compliance risk. Kraken says there was no external system compromise and no customer fund loss, which should keep broader market impact limited. However, heightened support-impersonation and phishing risk may increase near-term user security concerns, while longer-term regulatory scrutiny could pressure centralized exchanges.