Crypto exchange Kraken disclosed two insider-related security incidents involving support staff access to limited client data, followed by an extortion attempt by a criminal group, according to a company statement and comments from its chief security officer.

The firm said no systems were breached and no client funds were placed at risk in either case. Both incidents involved inappropriate access to internal support tools rather than core trading infrastructure, and access was revoked once