Kraken links extortion threat to insider misuse, confirming no breach while tightening controls and aiding investigations.

Crypto exchange Kraken is confronting an extortion attempt tied to insider misuse of its support systems. Threat actors claim to possess videos showing limited client data access and are demanding payment. Company officials say no funds were exposed and core infrastructure remained untouched. Investigations now center on internal access abuse, with law enforcement engaged.

Insider Activity at Kraken Leads to Extortion Threat

Chief Security Officer of Kraken Nick Percoco revealed that an unidentified group is attempting to extort the company. According to the CSO, the group is threatening to release videos allegedly showing internal systems with client data. 

Despite the pressure, Kraken has refused to comply or negotiate. Percoco stressed that the exchange’s infrastructure was never breached. Instead, two separate incidents involved inappropriate access by individuals within the company’s support team. Each case was quickly identified and contained.

Kraken Security Update

We are currently being extorted by a criminal group threatening to release videos of our internal systems with client data shown if we do not comply with their demands. It’s important to start with the most important points: our systems were never…

— Nick Percoco (@c7five) April 13, 2026

An initial alert came in February 2025, when Kraken received a tip about a video circulating on a criminal forum. The footage appeared to show unauthorized access to client support systems. 

Meanwhile, the probe pointed to a member of the support team. The member’s access was quickly cut off and security measures were strengthened. Also, affected users were notified.

Percoco also stated that a similar incident occurred more recently. Another tip flagged a new video showing comparable activity. Kraken responded in the same manner and terminated the individual’s access.

Shortly after shutting down the unauthorized access, the extortion attempt began. The group demanded payment in exchange for withholding the videos from media outlets and social platforms, including X. Kraken declined, stating it will not engage with criminal actors.

Kraken Tightens Security as Investigation Points to Wider Insider Threat Scheme

Ongoing investigations suggest a broader pattern of insider recruitment targeting multiple industries. Kraken confirmed collaboration with law enforcement agencies across several jurisdictions. Authorities are working to identify and arrest those responsible.

Percoco noted that evidence gathered so far supports potential identification of the perpetrators. However, details remain limited due to the active investigation. Security teams have since tightened internal controls and monitoring systems. 

The company also continues to review its processes to reduce insider risk exposure. Kraken emphasized that affected users have already been contacted directly. No further action is required from clients at this stage.