-
Criminals are threatening to release internal system footage showing client data unless Kraken pays a ransom.
-
Two insider-linked incidents exposed around 2,000 accounts, just 0.02% of Kraken’s total user base.
-
Kraken is refusing to negotiate. It just revoked compromised credentials, and is now cooperating with law enforcement.
A criminal group is holding crypto exchange Kraken hostage through video footage. Dark web forums are now circulating internal clips from inside the exchange, and the criminals behind them are demanding payment to keep the content offline. Kraken, however, is refusing to play along.
The exchange confirmed the extortion attempt and says it traces back to two separate incidents of insider access within its support team. While the exposure affected a limited number of accounts, the criminals are now wielding the footage as leverage, threatening to release more unless the exchange hands over a ransom.
Insiders Handed Criminals the Keys
Kraken’s investigation revealed that two individuals within its support team took advantage of their access to leak limited internal data. The exposure touched roughly 2,000 accounts (just 0.02% of its entire user base). Once the security team flagged the suspicious activity, it moved immediately to revoke both sets of credentials.
The first incident surfaced in February 2025, when a video showing Kraken’s internal systems appeared on a criminal forum. The exchange traced the clip to a support team insider, tightened its access controls, and notified the affected users. A second, similar incident emerged more recently, prompting the same swift response from the company’s security team.
Both cases expose a growing and uncomfortable truth; criminals no longer need to crack through firewalls when they can simply recruit someone already on the inside.
Kraken Refuses to Pay, Calls in Law Enforcement
Kraken is not entertaining the criminals’ demands. Nick Percoco, the exchange’s Chief Security and Information Officer, made the company’s stance unmistakably clear on X.
Paraphrased, Percoco declared that no breach hit their systems and no funds at risk. Thus, no criminals are getting a dime and the company can never negotiate with cyber thieves.
The exchange has since engaged law enforcement and industry partners to push the investigation forward. Kraken says it believes the extortion attempt connects to a broader campaign by criminal networks that are actively recruiting insiders across the crypto, gaming, and telecom sectors. The exchange just also rolled out new security measures and confirmed its operations are running without disruption.
While Kraken’s breach affected only 2,000 accounts, other exchanges have suffered far larger exposures, an Iranian crypto exchange breach exposed data of more than 50,000 users on the dark web, highlighting the scale of data leaks that can occur when crypto platforms’ security fails.
Crypto Industry Faces a Mounting Insider Threat
Across the digital asset space, cybercriminals are shifting tactics; moving away from direct infrastructure attacks and toward social engineering and insider recruitment. Employees with privileged system access have become their preferred entry point.
The financial damage is staggering. Estimates from blockchain analytics firm Chainalysis, points to crypto frauds and scams draining more than $17 billion out of victims last year alone. Impersonation schemes led the surge, climbing roughly 1,400 percent year-over-year. Criminal groups are also deploying AI tools to amplify these operations, with AI-powered scams generating several times more profit than conventional methods.
Investigators have traced many of these schemes to organized crime networks operating across East and Southeast Asia. Forced-labor compounds in countries like Myanmar and Cambodia are reportedly housing trafficking victims, coercing them into running coordinated scam operations that target victims worldwide.
Law enforcement, however, is striking back. Authorities recently recovered 61,000 bitcoin in the United Kingdom; a record seizure that signals growing momentum against crypto crime.
For Kraken, the immediate battle is public trust. The exchange is betting that full transparency and a firm refusal to negotiate will serve it better than silence or compliance. With law enforcement engaged and fresh safeguards in place, Kraken is making one thing clear: criminals will not write the next chapter of this story.
