Kraken Says Criminals Threaten to Release Videos After Insider Access to Customer Data
Summary
Kraken says a criminal group is trying to extort it with threats to release videos of internal support systems. The exchange reports two episodes of improper employee access affecting about 2,000 accounts, and says it revoked access and notified users.
Key points
- Kraken says a criminal group is threatening to release videos showing internal systems with client data unless the company meets its demands.
- The company reports two instances of support employees improperly accessing limited customer-support data after being recruited by the threat actor.
- Kraken says about 2,000 accounts, or 0.02% of its users, were affected; it says its systems were not breached and client funds were not at risk.
- Kraken says it revoked the employees’ access, strengthened controls, and notified users whose information was exposed.
- The exchange says it will not pay or negotiate and is working with federal law enforcement.
Article Details
- Victim Organization
- Kraken
- Incident Type
- Insider-enabled access to limited customer support data and an extortion attempt
- Data Types Exposed
- Customer support data; specific fields were not disclosed
- Affected Records
- Approximately 2,000 accounts (0.02% of Kraken's user base)
- Operational Impact
- Kraken reported that its systems were not breached and client funds were not at risk. It revoked the employees' access, investigated, strengthened controls, notified affected users, and is working with law enforcement.
- Ransom Or Extortion
- Kraken reported that a criminal group threatened to release videos showing internal systems with client data unless its demands were met. Kraken said it would not pay or negotiate; the demands were not specified.
- Claim Status
- confirmed