Kraken exchange’s internal support system is reportedly on sale online; access lasts 1–2 months, with unverified claims.
Kraken cryptocurrency exchange internal support panel access is reportedly being offered on a dark web forum. The listing claims users can view profiles, transaction histories, and KYC documents.
The access is allegedly read-only and available for as little as $1. While unverified, this news raises concerns about customer data exposure online.
Alleged Dark Web Listing Details
According to monitoring by Dark Web Informer, the listing claims access allows viewing of user accounts and transactions. Users can also generate support tickets that could potentially extract sensitive data.
The listing mentions no IP restrictions, with requests routed through Kraken’s systems. TOTP codes for the accounts reportedly expire in February. The post also claims access would last between one and two months before rotation.
KYC documents, including identification cards, selfies, proof of address, and source of funds, are listed as retrievable. Negotiation over the price is reportedly possible. However, no independent sources have confirmed the validity of these claims.
Kraken Security Measures and Past Attempts
Kraken has stated that its systems limit unnecessary access to customer data. The exchange uses monitoring to detect unusual activity in real-time. Chief Security Officer Nick Percoco said teams intervene when suspicious behavior is detected.
He added internal AI and analytics work behind the scenes to secure customer data. Past incidents at Coinbase and Binance show that social engineering attacks targeting support staff are common.
In 2025, attackers tried to bribe agents for customer data at multiple exchanges. Coinbase reported losses of up to $400 million due to insider access. Kraken and Binance managed to prevent similar breaches through layered access controls.
Related Readings: Kraken Grants One-Year $210M USDT Loan to KindlyMD Subsidiary
Related Law Enforcement Actions
Coinbase recently assisted authorities in arresting a former support agent in India. The agent reportedly gave hackers access to sensitive customer data. A Brooklyn man also faced charges for impersonating Coinbase representatives to steal nearly $16 million.
Investigators recovered over $600,000 from the scheme. Authorities continue to coordinate across jurisdictions to prosecute such attacks.
These incidents highlight the importance of monitoring internal support access. Exchanges are increasingly relying on AI and automated alerts to protect user information.
Kraken emphasized that both user-controlled and internal measures prevent unauthorized access. Continuous monitoring and analytics help safeguard accounts against social engineering and fraud.
Source: https://www.livebitcoinnews.com/kraken-user-data-and-transaction-records-allegedly-marketed-on-dark-web-sites-forums/
