Kraken told Bloomberg, CoinDesk, and other outlets that insider-enabled access to support tooling led to extortion over screen recordings, with roughly 2,000 accounts potentially viewed—a tiny fraction of its user base—while trading infrastructure and balances were described as unaffected. The firm publicly refused to pay and cited law-enforcement cooperation.
Canonical record: Kraken 2026 on BreachHistory.