Kraken Refuses Ransom After Insider Breach Exposes 2,000 Accounts

Two thousand Kraken clients face the risk of their private data being leaked on social media. The exposure occurred after two support employees were recruited by a cybercrime group to gain improper access to internal systems. These employees recorded videos of internal systems containing client support data for 2,000 accounts, or 0.02% of the user base. Kraken revoked employee access and strengthened controls following a tip in February 2025. A criminal group subsequently threatened to release the videos to media outlets and social media unless payment was made. Kraken refused to pay or negotiate with the ransom demands. A criminal investigation is underway to identify and arrest the responsible individuals. 2,000 clients face the risk of their private data being leaked on social media.