Kraken Stands Firm Against Extortion After Criminals Film Internal Systems

Key Points

• Criminal organization demands payment from Kraken after obtaining video recordings of the exchange’s internal operations
• Chief Security Officer Nick Percoco states no system compromise occurred and all customer assets remain secure
• Approximately 2,000 user accounts may have been accessed during two distinct events in February 2025 and recently
• Federal authorities are collaborating with Kraken on the investigation, with one extortion scheme already neutralized
• Similar incident targeted Coinbase in May 2025, demanding $20 million following compromise of approximately 70,000 customer records

The cryptocurrency exchange Kraken has publicly declined to meet the demands of cybercriminals who captured video recordings of its internal operational systems and are threatening public disclosure. Nick Percoco, serving as the platform’s Chief Security Officer, announced the company’s position via X on Monday.

According to Percoco, the perpetrators recorded Kraken’s customer support personnel while they accessed internal client management platforms. This footage is now being weaponized to extract an undisclosed sum from the exchange.

The exchange has verified that no complete system penetration took place. At no time were customer assets placed in jeopardy during either occurrence.

Two distinct security events form the foundation of this extortion campaign. The initial incident transpired in February 2025, when evidence suggests a Kraken support staff member recorded internal platform activities. A subsequent incident following a comparable methodology occurred more recently.

In each situation, Kraken responded swiftly to recognize the security risk and terminate unauthorized access. The platform reports successfully dismantling one extortion scheme tied to this criminal activity.

Approximately 2,000 customer accounts on Kraken’s platform were potentially accessed throughout both security incidents. The exchange has initiated contact with all potentially impacted users.

Federal Authorities Join Investigation

Kraken has engaged federal law enforcement agencies to pursue the criminal organization. Percoco indicated the ongoing investigation may result in apprehensions.

Internal security risks have emerged as an escalating challenge throughout the digital currency ecosystem. The North Korean-linked Lazarus Group has gained notoriety for infiltrating operatives within legitimate organizations, with security researchers documenting no fewer than 60 identified Lazarus-connected developers working for cryptocurrency ventures.

Coinbase Experienced Comparable Extortion Scheme

Kraken isn’t the inaugural prominent exchange confronting this type of criminal pressure. During May 2025, Coinbase revealed that cybercriminals demanded $20 million to prevent the release of customer information.

That security incident impacted approximately 70,000 platform users and stemmed from corruption payments made to international customer support personnel.

Overall cryptocurrency security incidents have demonstrated an upward trajectory. Blockchain intelligence provider Nominis reports that more than $178 million vanished through significant crypto-related attacks during March 2026, representing a substantial increase from $49.3 million recorded in February.

Authorization exploitation emerged as the predominant attack vector throughout March, with targets inadvertently approving transactions that granted attackers complete control over their digital assets.

Percoco emphasized that protecting Kraken’s customers remains the platform’s “highest priority” and affirmed ongoing efforts to strengthen defenses against evolving security challenges.

The post Kraken Stands Firm Against Extortion After Criminals Film Internal Systems appeared first on Blockonomi.