<\/p>\n
Kraken rebuffs a criminal extortion bid after improper internal access exposed data on about 2,000 accounts but says no systemic breach or client fund risk.<\/p>\n
<\/p>\n
Cryptocurrency exchange Kraken says it is being blackmailed by a criminal organisation that claims to have videos showing access to the company\u2019s internal systems, but has vowed not to pay any ransom and maintains that customer funds remain safe. In a statement cited by CoinDesk, the platform stressed there had been \u201cno systemic breach\u201d of its trading infrastructure or wallets, describing the incident as a targeted abuse of internal access rather than a successful hack of core systems.<\/p>\n
<\/p>\n
Kraken said the episode stems from improper access by individuals linked to its customer service operation in two separate incidents, which together exposed limited data on around 2,000 accounts, or roughly 0.02% of its total user base. Those users have been notified, the exchange added, while the people involved have had their credentials revoked and been cut off from internal tools as Kraken tightens monitoring and access controls.<\/p>\n
Chief security officer Nick Percoco, who has previously called a separate $3 million exploit of Kraken\u2019s systems \u201cnot white hat hacking, it is extortion,\u201d said the company is again treating the new threats as a criminal matter and is cooperating with law enforcement. He told reporters Kraken believes it has sufficient evidence \u201cto identify and help arrest\u201d those behind the latest extortion attempt and reiterated that the platform will not negotiate with actors trying to monetize internal access.<\/p>\n
According to the company\u2019s description, the attack reflects a rising pattern of \u201cinternal infiltration + social engineering,\u201d in which outsiders work to compromise or recruit people inside service organisations in order to gain read\u2011only access, reconnaissance footage or limited customer data rather than directly attacking hardened wallet systems. Earlier this year, a dark\u2011web listing claiming $1 access to Kraken\u2019s internal support panel and KYC data prompted similar concerns, though the exchange did not confirm a breach and security researchers warned that even read\u2011only access to support tools could be weaponised for phishing and targeted scams.<\/p>\n
The new extortion attempt lands after a separate March incident in which a Kraken user reportedly lost about 7,784 ETH and 26.5 BTC \u2014 worth roughly $18.2 million \u2014 to a sophisticated social\u2011engineering scheme before the funds were moved to HitBTC, underscoring the spectrum of threats facing both platforms and customers. As blockchain analytics firm EmberCN and others have noted, even where exchange treasuries and hot wallets remain uncompromised, lapses in human controls \u2014 from customer\u2011support access to user opsec \u2014 can still translate into large losses and reputational damage.<\/p>\n
For Kraken, the latest case is a stress test of its long\u2011promoted security culture, which includes mandatory two\u2011factor authentication, hardware\u2011key support and regular public messaging from Percoco on account\u2011protection best practices. For the wider industry, it is another reminder that in a market where a single compromised credential can dangle millions of dollars in front of attackers, the biggest risks often sit at the intersection of internal access, human error and old\u2011fashioned extortion \u2014 not just in zero\u2011day code.<\/p>\n
<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"
Kraken rebuffs a criminal extortion bid after improper internal access exposed data on about 2,000 accounts but says no systemic breach or client fund risk. Summary Kraken says it is…<\/p>\n","protected":false},"author":1,"featured_media":1896,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-25844","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptocurrency"],"_links":{"self":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/25844","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/comments?post=25844"}],"version-history":[{"count":1,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/25844\/revisions"}],"predecessor-version":[{"id":25845,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/25844\/revisions\/25845"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/media\/1896"}],"wp:attachment":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/media?parent=25844"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/categories?post=25844"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/tags?post=25844"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}