Kraken Insider Data Extortion

Summary

• Two insider incidents at Kraken exposed customer support data through legitimate internal access rather than a direct external system breach.
• The exposed data appears limited to support-level records such as names, addresses, KYC materials, and ticket history, affecting about 2,000 accounts.
• A criminal group used stolen videos or forum-posted evidence to demand payment and threaten release of the material.
• Kraken says trading systems and customer funds were not compromised, which keeps the incident in the privacy and account-data exposure category rather than a platform-funds event.
• The repeated insider pattern suggests support-team access remains a weak point in crypto exchange security and privacy controls.
• Kraken responded by revoking access, tightening controls, notifying affected users, and working with law enforcement.