KRAKEN FACES EXTORTION AFTER INSIDER BREACH
SECURITY DESK■ 1 MIN READ
TUE, APR 14, 2026■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE
Cryptocurrency exchange Kraken disclosed that hackers obtained internal system access through an insider and are now demanding payment to prevent the release of sensitive videos. The threat targets footage showing systems that store client data.
Kraken announced the extortion attempt publicly, stating that a cybercrime group gained access to internal systems via a compromised employee or contractor. The attackers claim to possess videos of the exchange's infrastructure and are leveraging this material to demand payment.
The breach raises questions about Kraken's internal security protocols and employee access controls. The exchange has not disclosed whether the attackers successfully accessed customer data or confirmed the legitimacy of their claims.
Kraken joins other major crypto platforms targeted by extortion schemes in recent years. The company has not revealed details about ransom demands, negotiations, or whether it intends to pay. Crypto exchanges remain high-value targets due to the financial assets they manage and the relative difficulty of law enforcement intervention in cryptocurrency cases.
The incident underscores the importance of insider threat detection and multi-factor authentication in protecting sensitive financial infrastructure.
■ MORE FROM THE SECURITY DESK
Cybercriminals have transformed DDoS attacks into a polished, commercialized service complete with pricing tiers, customer support, and reseller programs. The DDoS-as-a-Service market has evolved from basic tools into sophisticated attack platforms.
YESTERDAY— Industry Desk
Microsoft faced backlash after threatening a security researcher with criminal investigation, reigniting debate over software vulnerability disclosure practices and corporate responsibility.
YESTERDAY— Security Desk
Google is deploying Device Bound Session Credentials (DBSC) to all Chrome users, a security feature designed to prevent account takeovers by protecting session cookies from theft.
YESTERDAY— Industry Desk
Dutch authorities have dismantled a major botnet comprising 17 million infected devices and seized over 200 servers hosting the operation at a local provider.
YESTERDAY— Security Desk