APRIL
X
X
SECURITY
GMIX
On April 13, 2026, the crypto exchange Kraken revealed it was the target of an active extortion attempt. A criminal group threatened to disclose videos compromising the company’s internal systems. The crypto platform refused any negotiation and confirmed that customer funds were never at risk.
The case has its roots well before April 2026. According to Kraken’s Chief Security Officer (CSO) Nick Percoco, two malicious customer support employees abused their access to the internal systems of the crypto exchange on separate occasions.
The first incident dates back to February 2025. Kraken had then received a report from a reliable source indicating a video was circulating on a criminal forum. The footage showed an individual having access to the internal customer support tools. The internal investigation quickly identified the person responsible. Their access was immediately revoked.
The more recent second incident follows the same pattern. The crypto company Kraken received a new report accompanied by a similar video. Unauthorized access was once again detected and cut off without delay.
In both cases, the potentially exposed data concerns a very limited volume. According to the company, about 2,000 customer accounts may have been viewed without authorization. This would represent only 0.02% of the total customer base of the crypto platform.
Shortly after shutting down the second fraudulent access, the criminal group took action. It threatened to distribute the internal videos of the two incidents to media and social platforms if Kraken did not meet its ransom demands.
Faced with the threat, Kraken did not give in. Nick Percoco was categorical:
We will not pay these criminals. We will never negotiate with bad actors.
On April 13, 2026, the cryptocurrency exchange platform also confirmed on X that its systems had never been compromised. In other words, customer funds were never at risk.
The company is now working in coordination with crypto industry partners as well as law enforcement to identify and prosecute those responsible.
In any case, this incident illustrates a structural problem in the sector. The fact is that cybersecurity of crypto exchanges relies as much on technical controls as on human behavior. Founded in 2011 and serving millions of retail and institutional clients, Kraken is known for its regulatory compliance protocols. Yet, no infrastructure is safe from the human factor.
One thing is certain: Kraken stood firm against extortion. But this crypto news of April 13, 2026 raises an essential question: in a sector where digital assets trade in real time, who really controls those who control the systems? Food for thought.