Videos circulating on dark web forums have pulled crypto exchange Kraken into an extortion attempt, but the exchange says no systems were compromised and client funds remain secure. The firm claims a criminal group is threatening to release internal footage to pressure the exchange into paying a ransom.
Singapore Summit: Meet the largest APAC brokers you know (and those you still don't!)
Insider Access Behind Data Exposure
Kraken discovered that two incidents involving insider access to limited support data led to about 2,000 accounts being exposed, representing just 0.02% of its client base. Investigations revealed that both cases were tied to individuals within its support team, whose credentials were immediately revoked once the activity came to light.
- Kraken Steps Up Speed Race with New Equinix Colocation Service for Crypto Traders
- Kraken Halts IPO Plans as Weak Market Dents Crypto Valuations: Report
- CySEC-Regulated Kraken Unit Adds Futures Tied to Equities, Commodities, FX
The first incident dates back to February 2025, when a video showing internal systems appeared on a criminal forum. Kraken traced the clip to an insider, tightened access controls, and informed affected users. A similar event surfaced recently, prompting the same swift response from the company.
“Our systems were never breached; funds were never at risk; we will not pay these criminals; we will not ever negotiate with bad actors,” said Nick Percoco, Chief Security and Information Officer at Kraken, on X.
Kraken Security Update
— Nick Percoco (@c7five) April 13, 2026
We are currently being extorted by a criminal group threatening to release videos of our internal systems with client data shown if we do not comply with their demands. It’s important to start with the most important points: our systems were never…
Law Enforcement Probes and Industry Risks
Kraken said it is now working closely with law enforcement and industry partners to investigate the extortion attempt, which it believes is linked to broader efforts by criminal networks to recruit insiders across crypto, gaming, and telecom firms.
The exchange stressed that its operations continue normally and that new security measures are already in place to prevent similar incidents. Insider threats have become a rising concern in the digital asset industry, as cybercriminals increasingly target employees with system access rather than directly attacking infrastructure.
You may also find interesting: Polish Regulator Hits XTB With $5.5M Fine Over CFD Marketing Rules
Blockchain analytics firm Chainalysis estimates that crypto scams and fraud may have siphoned off more than $17 billion last year alone, with impersonation schemes alone surging by around 1,400% year-over-year. Criminal groups are increasingly using AI tools to supercharge these operations, with AI‑enabled scams proving several times more profitable than traditional grifts.
REPORT: Crypto scams netted $17B in 2025 as impersonation tactics surge 1,400% and AI-generated schemes overtake cyberattacks as primary theft method, according to Chainalysis 2026 Crypto Crime Report.https://t.co/2PBuhNuMdj
— CoinDesk (@CoinDesk) January 14, 2026
Investigators have also traced many of these schemes back to organized crime networks in East and Southeast Asia, including forced-labor compounds in countries such as Cambodia and Myanmar where trafficking victims are coerced into running scams. While the overall threat has intensified, law enforcement has begun to score major wins, including record crypto seizures like a 61,000‑bitcoin recovery in the UK.