Security

<h2 id="key-points">Key Points</h2>
<ul>
 <li>Criminal organization demands payment from Kraken after obtaining video recordings of the exchange’s internal operations</li>
 <li>Chief Security Officer Nick Percoco states no system compromise occurred and all customer assets remain secure</li>
 <li>Approximately 2,000 user accounts may have been accessed during two distinct events in February 2025 and recently</li>
 <li>Federal authorities are collaborating with Kraken on the investigation, with one extortion scheme already neutralized</li>
 <li>Similar incident targeted Coinbase in May 2025, demanding $20 million following compromise of approximately 70,000 customer records</li>
</ul>
<p>The cryptocurrency exchange Kraken has publicly declined to meet the demands of cybercriminals who captured video recordings of its internal operational systems and are threatening public disclosure. Nick Percoco, serving as the platform’s Chief Security Officer, announced the company’s position via X on Monday.</p>
<div class="embed-twitter">
 <blockquote class="twitter-tweet">
  <p>Kraken Security Update</p>
  <p>We are currently being extorted by a criminal group threatening to release videos of our internal systems with client data shown if we do not comply with their demands. It’s important to start with the most important points: our systems were never…</p>
  <p>— Nick Percoco (@c7five) <a href="https://twitter.com/c7five/status/2043720915330969743?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">April 13, 2026</a></p>
 </blockquote>
</div>
<p>According to Percoco, the perpetrators recorded Kraken’s customer support personnel while they accessed internal client management platforms. This footage is now being weaponized to extract an undisclosed sum from the exchange.</p>
<blockquote>
 <p>“We will not pay these criminals,” Percoco declared. “We will not ever negotiate with bad actors.”</p>
</blockquote>
<p>The exchange has verified that no complete system penetration took place. At no time were customer assets placed in jeopardy during either occurrence.</p>
<p>Two distinct security events form the foundation of this extortion campaign. The initial incident transpired in February 2025, when evidence suggests a Kraken support staff member recorded internal platform activities. A subsequent incident following a comparable methodology occurred more recently.</p>
<p>In each situation, <a href="https://coincentral.com/maxine-waters-presses-fed-over-kraken-master-account/" rel="noopener noreferrer nofollow">Kraken</a> responded swiftly to recognize the security risk and terminate unauthorized access. The platform reports successfully dismantling one extortion scheme tied to this criminal activity.</p>
<p>Approximately 2,000 customer accounts on Kraken’s platform were potentially accessed throughout both security incidents. The exchange has initiated contact with all potentially impacted users.</p>
<h2 id="federal-authorities-join-investigation">Federal Authorities Join Investigation</h2>
<p>Kraken has engaged federal law enforcement agencies to pursue the criminal organization. Percoco indicated the ongoing investigation may result in apprehensions.</p>
<blockquote>
 <p>The platform is additionally coordinating with cybersecurity specialists across the industry. Percoco stated the organization is partnering to “investigate and disrupt insider recruitment efforts” focused on cryptocurrency, gaming, and telecommunications sectors.</p>
</blockquote>
<p>Internal security risks have emerged as an escalating challenge throughout the digital currency ecosystem. The North Korean-linked Lazarus Group has gained notoriety for infiltrating operatives within legitimate organizations, with security researchers documenting no fewer than 60 identified Lazarus-connected developers working for cryptocurrency ventures.</p>
<h2 id="coinbase-experienced-comparable-extortion-scheme">Coinbase Experienced Comparable Extortion Scheme</h2>
<p>Kraken isn’t the inaugural prominent exchange confronting this type of criminal pressure. During May 2025, <a href="https://coincentral.com/ripple-and-coinbase-ceos-both-back-the-clarity-act-is-a-senate-vote-finally-coming/" rel="noopener noreferrer nofollow">Coinbase</a> revealed that cybercriminals demanded $20 million to prevent the release of customer information.</p>
<p>That security incident impacted approximately 70,000 platform users and stemmed from corruption payments made to international customer support personnel.</p>
<p>Overall cryptocurrency security incidents have demonstrated an upward trajectory. Blockchain intelligence provider Nominis reports that more than $178 million vanished through significant crypto-related attacks during March 2026, representing a substantial increase from $49.3 million recorded in February.</p>
<p>Authorization exploitation emerged as the predominant attack vector throughout March, with targets inadvertently approving transactions that granted attackers complete control over their digital assets.</p>
<p>Percoco emphasized that protecting Kraken’s customers remains the platform’s “highest priority” and affirmed ongoing efforts to strengthen defenses against evolving security challenges.</p>
<p>The post <a href="https://blockonomi.com/kraken-stands-firm-against-extortion-after-criminals-film-internal-systems/" rel="noopener noreferrer nofollow">Kraken Stands Firm Against Extortion After Criminals Film Internal Systems</a> appeared first on <a href="https://blockonomi.com" rel="noopener noreferrer nofollow">Blockonomi</a>.</p>

Kraken Stands Firm Against Extortion After Criminals Film Internal Systems

Table of Contents

Blockonomi

Other articles published on Apr 14, 2026

Join our free newsletter for daily crypto updates!