{"id":236128,"date":"2025-07-17T11:03:09","date_gmt":"2025-07-17T11:03:09","guid":{"rendered":"https:\/\/krypto-investigation.de\/?p=236128"},"modified":"2026-07-11T16:29:42","modified_gmt":"2026-07-11T14:29:42","slug":"security-incident-at-kraken","status":"publish","type":"post","link":"https:\/\/krypto-investigation.de\/en\/sicherheitsvorfall-bei-kraken\/","title":{"rendered":"Security incidents at Kraken in 2025\/2026: What actually happened at the crypto exchange"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Contrary to initial reports by various media outlets, the security incident uncovered at Kraken 2025 was not an external hack with a zero-day vulnerability, but a <strong>insider incident<\/strong>A member of the support team recorded videos of internal systems and shared them on a criminal forum. In the spring of 2026, a second, similar incident occurred involving a different employee, along with an extortion attempt which Kraken publicly denied. Approximately [number missing] employees were affected. <strong>2,000 accounts \u2014 0.02 percent of the global user base<\/strong>. Kraken CSO Nick Percoco clarified: No systems were compromised, and no customer funds were at risk. The incident is part of a broader industry trend of a growing wave of insider recruitment campaigns, which are also affecting Coinbase, telecom providers, and gaming companies.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Key facts of the incidents<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>First incident:<\/strong> February 2025<\/li>\n\n\n\n<li><strong>Second incident:<\/strong> Spring 2026, similar situation with another employee<\/li>\n\n\n\n<li><strong>The following extortion attempt:<\/strong> April 2026, publicly rejected by Kraken<\/li>\n\n\n\n<li><strong>Affected accounts:<\/strong> approximately 2,000 (0.02 % of the global user base)<\/li>\n\n\n\n<li><strong>Type of data viewed:<\/strong> exclusively customer support records<\/li>\n\n\n\n<li><strong>Not affected:<\/strong> Wallets, private keys, 2FA codes, customer funds<\/li>\n\n\n\n<li><strong>Statement from CSO Nick Percoco:<\/strong> \u201e&quot;Our systems were never breached; funds were never at risk; we will not pay these criminals.&quot;\u201c<\/li>\n\n\n\n<li><strong>Operator:<\/strong> Payward Inc. (parent company of Kraken)<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">What actually happened \u2014 not a classic hack<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The incident followed a pattern that has increased significantly in the security community over the past two years: <strong>Insider threat instead of external exploit.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>February 2025.<\/strong> Kraken received a tip about a video circulating on a criminal forum showing an individual navigating internal customer support systems. An internal investigation identified a member of the support team as the source. Access was immediately revoked, additional access controls were implemented, and affected customers were notified. Kraken cooperated with law enforcement agencies in several jurisdictions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Spring 2026.<\/strong> A second, similar report. Again a support employee, a new video, the same reaction: identification, account suspension, notification of the affected accounts. Then the extortion began\u2014a criminal group demanded payment, threatening to distribute the video footage from both incidents to media outlets and on social networks. Kraken refused and announced legal action.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Important for context: There were <strong>no zero-day exploit, no third-party vulnerability, no external intruder who had gained system access<\/strong>. The employees had legitimate access \u2014 they abused it.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What the attackers really saw \u2014 and what they didn&#039;t<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The term &quot;data leak&quot; is often used generically in reporting. In Kraken&#039;s case, the scope of the data breach was clearly defined:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>The following could be viewed:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Customer support tickets and related communication<\/li>\n\n\n\n<li>Master data to the extent that it is visible for support processes (name, email, country if applicable)<\/li>\n\n\n\n<li>Possibly information about account status or verification level<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Not reviewed or compromised:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Wallet addresses and private keys<\/li>\n\n\n\n<li>2FA codes or authenticator seeds<\/li>\n\n\n\n<li>Passwords or password hashes<\/li>\n\n\n\n<li>Direct access to trading accounts<\/li>\n\n\n\n<li>Ability to initiate trades or withdrawals<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Compared to real stock market hacks of recent years (Mt. Gox 2014, Coincheck 2018, FTX 2022, Bybit February 2025 with a loss of 1.5 billion USD), the Kraken incident is in a <strong>other category<\/strong>No loss of client funds, no interference with the trading infrastructure.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">The bigger picture \u2014 insider recruitment as an industry trend<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Kraken case is not an isolated incident, but part of a professional, organized wave. Key characteristics:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Dark Web Recruitment<\/strong> from employees at large crypto exchanges, gaming platforms and telecommunications providers<\/li>\n\n\n\n<li>Payment typically between <strong>3,000 and 15,000 USD per employee<\/strong>, depending on the access level<\/li>\n\n\n\n<li>Recruiters&#039; marketing promise: &quot;No malware needed, complete anonymity&quot;\u201e<\/li>\n\n\n\n<li>Goal: not direct theft, but <strong>Data for phishing attacks<\/strong> on identified customers with high account balances<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The most prominent comparable case is <strong>Coinbase in May 2025<\/strong>Attackers bribed employees of an Indian customer support provider, gaining access to the data of approximately 70,000 accounts. Coinbase estimated the total damage at around $400 million USD\u2014primarily due to subsequent waves of phishing attacks, in which the leaked account information was used to simulate credibility. Coinbase also rejected a $20 million USD ransom demand and instead offered a reward of the same amount for information leading to the perpetrators&#039; arrest.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Compared to Coinbase, the Kraken incident is orders of magnitude lower in terms of damage and number of affected accounts \u2014 due to both the different insider reach and the early detection by Kraken.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Kraken in a European context: First MiCAR-licensed global provider<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">For German and European users, a second development is at least as relevant as the security incident itself: <strong>Kraken became the first major global crypto exchange to receive a full MiCAR license on June 25, 2025.<\/strong> \u2014 issued by the Central Bank of Ireland.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">What this means in practice:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Kraken can offer its services directly and in a regulated manner in all 30 EEA countries.<\/li>\n\n\n\n<li>Supervision by the Central Bank of Ireland, in coordination with national authorities (in Germany BaFin)<\/li>\n\n\n\n<li>EU-wide consumer protection standards, transparency obligations, robust supervisory mechanisms<\/li>\n\n\n\n<li>The license covers all seven crypto activities regulated under MiCAR \u2014 custody, trading, portfolio management, payments, etc.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">You can read more about the European regulatory framework and current ESMA observations in our article on... <a href=\"https:\/\/krypto-investigation.de\/en\/eu-mica-crypto-regulation\/\">MiCA Regulation and Malta&#039;s licensing practice<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This regulatory framework is relevant for assessing the insider trading incident: A MiCAR-licensed exchange is subject not only to internal security standards, but also <strong>Reporting obligations to the supervisory authority<\/strong> In the event of security incidents, Kraken addresses the incident through DORA for operational resilience and through the GDPR for data leaks. Kraken has officially handled the incident in both areas.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Significance for users in Germany<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">From today&#039;s perspective, the concrete impact on Kraken customers in Germany is manageable. The most important points are:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Those who are not among the 2,000 affected accounts<\/strong>, is practically unaffected by the insider trading incidents.<\/li>\n\n\n\n<li><strong>Who is affected<\/strong>, was informed directly by Kraken. The main risk is an increased likelihood of targeted phishing attempts using real customer data.<\/li>\n\n\n\n<li><strong>Phishing follow-up waves<\/strong> These are the real risks after data breaches of this kind. They use the leaked master data to simulate credibility\u2014for example, fake support calls that mention real account numbers or verification status.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Recommendations that are not self-evident in this context:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>2FA with authenticator app<\/strong> instead of SMS (SIM swapping remains the most common attack vector for SMS-2FA)<\/li>\n\n\n\n<li><strong>Withdrawal whitelist<\/strong> Activate at Kraken \u2014 all payouts only to pre-approved addresses<\/li>\n\n\n\n<li><strong>Separate email account<\/strong> for stock market accounts that are not entangled with other services<\/li>\n\n\n\n<li><strong>Hardware Wallet<\/strong> For long-term holdings \u2014 trading accounts only hold what is actively traded.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">What happens if losses do occur \u2014 the consequences of phishing<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In our forensic practice, we regularly see data breaches of this kind. <strong>Phishing follow-up waves with a 4\u20138 week delay<\/strong>. The attackers are specifically using the leaked data and contacting affected customers under the pretext of a &quot;security check&quot; or a &quot;suspicious transaction.&quot; Anyone who obtains a customer&#039;s wallet data or seed phrase in this way can directly withdraw the coins.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In such cases, the forensic procedure is clear:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Immediate securing of evidence<\/strong> \u2014 Wallet addresses, transaction IDs, entire communication history with the supposed &quot;support staff&quot;, see our article on <a href=\"https:\/\/krypto-investigation.de\/en\/evidence-in-cases-of-crypto-fraud-which-evidence-is-crucial-for-filing-a-criminal-complaint-and-demanding-restitution\/\">Evidence in cases of crypto fraud<\/a>.<\/li>\n\n\n\n<li><strong>Initial forensic assessment<\/strong> about a <a href=\"https:\/\/krypto-investigation.de\/en\/wallet-check-2\/\">Wallet check<\/a> \u2014 Clarification of where the coins went and what points of contact exist for tracing them.<\/li>\n\n\n\n<li><strong>Stablecoin blocking requests<\/strong> in case of USDT or USDC losses \u2014 see <a href=\"https:\/\/krypto-investigation.de\/en\/cryptocurrencies-blocked-such-as-stablecoin-issuers-like-tether-and-circle-can-help-those-affected\/\">Cryptocurrencies blocked: How Tether and Circle can help<\/a>. Tether increased its blocking capacity by 2025 through the <a href=\"https:\/\/krypto-investigation.de\/en\/tether-investment-in-crystal-intelligence\/\">Investment in Crystal Intelligence<\/a> further expanded.<\/li>\n\n\n\n<li><strong>Criminal charges<\/strong> \u2014 even if the success rate in solving cases is limited in practice, the report forms the basis for civil prosecution and parallel blocking requests.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">Conclusion<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The insider incident at Kraken is not evidence of a general insecurity of the platform \u2014 it is evidence that the biggest current threat in the crypto industry is <strong>not in faulty software, but in the recruitment of employees with privileged access<\/strong> Kraken reacted quickly in both cases, informing affected accounts, adhering to regulatory reporting channels, and resisting extortion attempts. This is the right response and clearly distinguishes the incident from cases where exchanges cover things up for months or pay up.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For German users, the second, less widely publicized development is at least as relevant: Since June 2025, Kraken has been the first major global crypto exchange with a full MiCAR license, placing it within a tight EU regulatory framework. Those who consistently implement the key security measures (authenticator app, withdrawal whitelist, separate email address, hardware wallet for holdings) are well-prepared to protect themselves against phishing attacks resulting from insider trading incidents of this kind.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">FAQ \u2013 Frequently Asked Questions about the Kraken Security Incident<\/h2>\n\n\n\n<div data-schema-only=\"false\" class=\"wp-block-aioseo-faq\"><h3 class=\"aioseo-faq-block-question\"><strong>What really happened in Kraken 2025?<\/strong><\/h3><div class=\"aioseo-faq-block-answer\">\n<p class=\"wp-block-paragraph\">In February 2025, it was revealed that a member of the Kraken support team had recorded videos of internal systems and shared them on a criminal forum. A second, similar incident involving a different employee followed in the spring of 2026, along with an extortion attempt by a criminal group, which Kraken rebuffed. <strong>no external hack<\/strong> \u2014 the individuals concerned had legitimate access and abused it.<\/p>\n<\/div><\/div>\n\n\n\n<div data-schema-only=\"false\" class=\"wp-block-aioseo-faq\"><h3 class=\"aioseo-faq-block-question\"><strong>How many user accounts were affected?<\/strong><\/h3><div class=\"aioseo-faq-block-answer\">\n<p class=\"wp-block-paragraph\">According to Kraken CSO Nick Percoco, approximately [number missing] incidents occurred across both incidents. <strong>2,000 customer accounts potentially viewed<\/strong> \u2014 This corresponds to approximately 0.02 % of the global user base. The data accessed was limited to customer support information.<\/p>\n<\/div><\/div>\n\n\n\n<div data-schema-only=\"false\" class=\"wp-block-aioseo-faq\"><h3 class=\"aioseo-faq-block-question\"><strong>Were customer funds stolen?<\/strong><\/h3><div class=\"aioseo-faq-block-answer\">\n<p class=\"wp-block-paragraph\">No. Kraken has publicly stated that its systems were not compromised and no customer funds were at risk. This was a data breach in the support department, not a theft of coins.<\/p>\n<\/div><\/div>\n\n\n\n<div data-schema-only=\"false\" class=\"wp-block-aioseo-faq\"><h3 class=\"aioseo-faq-block-question\"><strong>What specific risks exist for affected customers?<\/strong><\/h3><div class=\"aioseo-faq-block-answer\">\n<p class=\"wp-block-paragraph\">The main risk is <strong>targeted phishing in the weeks and months following the incident<\/strong>. Attackers use leaked account information to make seemingly genuine contact attempts (&quot;Your account is showing suspicious activity...&quot;). Anyone who discloses seeds, passwords, or 2FA codes at this stage risks losing their coins.<\/p>\n<\/div><\/div>\n\n\n\n<div data-schema-only=\"false\" class=\"wp-block-aioseo-faq\"><h3 class=\"aioseo-faq-block-question\"><strong>Is Kraken regulated in Europe?<\/strong><\/h3><div class=\"aioseo-faq-block-answer\">\n<p class=\"wp-block-paragraph\">Yes. On June 25, 2025, Kraken became the first major global crypto exchange to receive a full MiCAR license, issued by the Central Bank of Ireland. This entitles Kraken to offer regulated crypto services in all 30 EEA countries and subjects it to EU-wide supervisory and reporting obligations.<\/p>\n<\/div><\/div>\n\n\n\n<div data-schema-only=\"false\" class=\"wp-block-aioseo-faq\"><h3 class=\"aioseo-faq-block-question\"><strong>What should I do if I suspect I am affected?<\/strong><\/h3><div class=\"aioseo-faq-block-answer\">\n<p class=\"wp-block-paragraph\">If Kraken hasn&#039;t actively contacted you, your account is likely not affected. Regardless, we recommend: enabling 2FA via an authenticator app (not SMS), activating a withdrawal whitelist, using a separate email account for exchanges, and moving funds to a hardware wallet. In case of an actual loss, contact a... <a href=\"https:\/\/krypto-investigation.de\/en\/wallet-check-2\/\">Wallet check<\/a> and file a criminal complaint \u2014 the trail is documented on the blockchain in any case.<\/p>\n<\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>Kraken is one of the largest cryptocurrency exchanges worldwide \u2013 but the security incident shows how vulnerable even market leaders remain.<\/p>","protected":false},"author":4,"featured_media":236130,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[7],"tags":[],"class_list":["post-236128","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-krypto-neuigkeiten"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO Pro 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"Kein Hack, sondern Insider Threat: Was bei Kraken 2025 und 2026 wirklich geschah, wie viele Konten betroffen waren und was es f\u00fcr deutsche Nutzer bedeutet.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"David L\u00fcdtke\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/krypto-investigation.de\/en\/sicherheitsvorfall-bei-kraken\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO Pro (AIOSEO) 4.9.10\" \/>\n\n\t\t<meta name=\"google-site-verification\" content=\"5fwsPGt6weGxnkNKobPDrJvm8Pvb1ts1WG8CLDqVY98\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_GB\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Krypto Investigation - Hilfe bei Krypto-Betrug &amp; Forensik\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Kraken Sicherheitsvorfall: Was 2025\/2026 wirklich passiert ist\" \/>\n\t\t<meta property=\"og:description\" content=\"Kein Hack, sondern Insider Threat: Was bei Kraken 2025 und 2026 wirklich geschah, wie viele Konten betroffen waren und was es f\u00fcr deutsche Nutzer bedeutet.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/krypto-investigation.de\/en\/sicherheitsvorfall-bei-kraken\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/krypto-investigation.de\/wp-content\/uploads\/2025\/07\/FullLogo_Transparent_NoBuffer.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/krypto-investigation.de\/wp-content\/uploads\/2025\/07\/FullLogo_Transparent_NoBuffer.png\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-07-17T11:03:09+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-07-11T14:29:42+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Kraken Sicherheitsvorfall: Was 2025\/2026 wirklich passiert ist\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Kein Hack, sondern Insider Threat: Was bei Kraken 2025 und 2026 wirklich geschah, wie viele Konten betroffen waren und was es f\u00fcr deutsche Nutzer bedeutet.\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/krypto-investigation.de\/wp-content\/uploads\/2025\/07\/FullLogo_Transparent_NoBuffer.png\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BlogPosting\",\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/sicherheitsvorfall-bei-kraken\\\/#blogposting\",\"name\":\"Kraken Sicherheitsvorfall: Was 2025\\\/2026 wirklich passiert ist\",\"headline\":\"Sicherheitsvorf\\u00e4lle bei Kraken 2025\\\/2026: Was bei der Krypto-B\\u00f6rse tats\\u00e4chlich passiert ist\",\"author\":{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/krypto-forensiker\\\/david-luedtke\\\/#forensiker\",\"name\":\"David L\\u00fcdtke\",\"url\":\"https:\\\/\\\/krypto-investigation.de\\\/krypto-forensiker\\\/david-luedtke\\\/\"},\"publisher\":{\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/krypto-investigation.de\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/kraken_logo.webp\",\"width\":1600,\"height\":900,\"caption\":\"Kraken\"},\"datePublished\":\"2025-07-17T11:03:09+02:00\",\"dateModified\":\"2026-07-11T16:29:42+02:00\",\"inLanguage\":\"en-GB\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/sicherheitsvorfall-bei-kraken\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/sicherheitsvorfall-bei-kraken\\\/#webpage\"},\"articleSection\":\"Krypto-Neuigkeiten\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/sicherheitsvorfall-bei-kraken\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/krypto-investigation.de\\\/en\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/category\\\/krypto-neuigkeiten\\\/#listItem\",\"name\":\"Krypto-Neuigkeiten\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/category\\\/krypto-neuigkeiten\\\/#listItem\",\"position\":2,\"name\":\"Krypto-Neuigkeiten\",\"item\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/category\\\/krypto-neuigkeiten\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/sicherheitsvorfall-bei-kraken\\\/#listItem\",\"name\":\"Sicherheitsvorf\\u00e4lle bei Kraken 2025\\\/2026: Was bei der Krypto-B\\u00f6rse tats\\u00e4chlich passiert ist\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/sicherheitsvorfall-bei-kraken\\\/#listItem\",\"position\":3,\"name\":\"Sicherheitsvorf\\u00e4lle bei Kraken 2025\\\/2026: Was bei der Krypto-B\\u00f6rse tats\\u00e4chlich passiert ist\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/category\\\/krypto-neuigkeiten\\\/#listItem\",\"name\":\"Krypto-Neuigkeiten\"}}]},{\"@type\":\"FAQPage\",\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/sicherheitsvorfall-bei-kraken\\\/#faq\",\"url\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/sicherheitsvorfall-bei-kraken\\\/\",\"mainEntity\":[{\"@type\":\"Question\",\"name\":\"Was ist bei Kraken 2025 wirklich passiert?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Im Februar 2025 wurde bekannt, dass ein Mitarbeiter des Kraken-Support-Teams Videos interner Systeme aufgezeichnet und in einem kriminellen Forum geteilt hatte. Im Fr\\u00fchjahr 2026 folgte ein zweiter, \\u00e4hnlicher Vorfall mit einem anderen Mitarbeiter, plus ein Erpressungsversuch durch eine kriminelle Gruppe, den Kraken zur\\u00fcckwies. Es war kein externer Hack \\u2014 die betroffenen Personen hatten ihren Zugang regul\\u00e4r und haben ihn missbraucht.\"}},{\"@type\":\"Question\",\"name\":\"Wie viele Nutzerkonten waren betroffen?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Nach Angaben von Kraken-CSO Nick Percoco wurden \\u00fcber beide Vorf\\u00e4lle hinweg etwa 2.000 Kundenkonten potenziell eingesehen \\u2014 das entspricht rund 0,02 % der globalen Nutzerbasis. Die eingesehenen Daten beschr\\u00e4nkten sich auf Kundensupport-Informationen.\"}},{\"@type\":\"Question\",\"name\":\"Wurden Kundengelder gestohlen?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Nein. Kraken hat \\u00f6ffentlich klargestellt, dass die Systeme nicht kompromittiert wurden und keine Kundengelder gef\\u00e4hrdet waren. Es handelt sich um einen Datenvorfall im Support-Bereich, keinen Diebstahl von Coins.\"}},{\"@type\":\"Question\",\"name\":\"Welche konkreten Risiken bestehen f\\u00fcr betroffene Kunden?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Das Hauptrisiko ist gezieltes Phishing in den Wochen und Monaten nach dem Vorfall. Angreifer nutzen geleakte Stammdaten, um echt wirkende Kontaktversuche aufzubauen (\\\"Ihr Konto zeigt verd\\u00e4chtige Aktivit\\u00e4t\\u2026\\\"). Wer in dieser Phase Seeds, Passw\\u00f6rter oder 2FA-Codes preisgibt, riskiert den Verlust seiner Coins.\"}},{\"@type\":\"Question\",\"name\":\"Ist Kraken in Europa reguliert?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Ja. Kraken hat am 25. Juni 2025 als erste gro\\u00dfe globale Krypto-B\\u00f6rse eine vollumf\\u00e4ngliche MiCAR-Lizenz erhalten \\u2014 ausgestellt von der Central Bank of Ireland. Damit ist Kraken berechtigt, in allen 30 EWR-Staaten regulierte Krypto-Dienste anzubieten und unterliegt EU-weiten Aufsichts- und Meldepflichten.\"}},{\"@type\":\"Question\",\"name\":\"Was sollte ich tun, wenn ich vermute, betroffen zu sein?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Wenn Kraken Sie nicht aktiv kontaktiert hat, geh\\u00f6ren Sie wahrscheinlich nicht zu den betroffenen Konten. Unabh\\u00e4ngig davon empfehlen sich: 2FA \\u00fcber Authenticator-App (nicht SMS), Withdrawal-Whitelist aktivieren, separates E-Mail-Konto f\\u00fcr B\\u00f6rsen verwenden, Best\\u00e4nde in eine Hardware Wallet auslagern. Bei einem tats\\u00e4chlichen Verlust beauftragen Sie einen Wallet-Check und erstatten Strafanzeige \\u2014 die Spur ist auf der Blockchain in jedem Fall dokumentiert.\"}}],\"inLanguage\":\"en-GB\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/sicherheitsvorfall-bei-kraken\\\/#breadcrumblist\"}},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/#organization\",\"name\":\"Krypto Investigation\",\"description\":\"Hilfe bei Krypto-Betrug & Forensik\",\"url\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/\",\"telephone\":\"+4915121017420\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/krypto-investigation.de\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/FullLogo_Transparent_NoBuffer.png\",\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/sicherheitsvorfall-bei-kraken\\\/#organizationLogo\",\"width\":285,\"height\":240,\"caption\":\"Krypto Investigation Logo \\u2013 Krypto-Forensik und Betrugsaufkl\\u00e4rung\"},\"image\":{\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/sicherheitsvorfall-bei-kraken\\\/#organizationLogo\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/author\\\/dluedtke\\\/#author\",\"url\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/author\\\/dluedtke\\\/\",\"name\":\"David L\\u00fcdtke\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/sicherheitsvorfall-bei-kraken\\\/#authorImage\",\"url\":\"https:\\\/\\\/krypto-investigation.de\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/David-150x150.jpg\",\"width\":96,\"height\":96,\"caption\":\"David L\\u00fcdtke\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/sicherheitsvorfall-bei-kraken\\\/#webpage\",\"url\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/sicherheitsvorfall-bei-kraken\\\/\",\"name\":\"Kraken Sicherheitsvorfall: Was 2025\\\/2026 wirklich passiert ist\",\"description\":\"Kein Hack, sondern Insider Threat: Was bei Kraken 2025 und 2026 wirklich geschah, wie viele Konten betroffen waren und was es f\\u00fcr deutsche Nutzer bedeutet.\",\"inLanguage\":\"en-GB\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/sicherheitsvorfall-bei-kraken\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/author\\\/dluedtke\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/author\\\/dluedtke\\\/#author\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/krypto-investigation.de\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/kraken_logo.webp\",\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/sicherheitsvorfall-bei-kraken\\\/#mainImage\",\"width\":1600,\"height\":900,\"caption\":\"Kraken\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/sicherheitsvorfall-bei-kraken\\\/#mainImage\"},\"datePublished\":\"2025-07-17T11:03:09+02:00\",\"dateModified\":\"2026-07-11T16:29:42+02:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/\",\"name\":\"Krypto Investigation\",\"description\":\"Hilfe bei Krypto-Betrug & Forensik\",\"inLanguage\":\"en-GB\",\"publisher\":{\"@id\":\"https:\\\/\\\/krypto-investigation.de\\\/en\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO Pro -->\r\n\t\t<title>Kraken Sicherheitsvorfall: Was 2025\/2026 wirklich passiert ist<\/title>\n\n","aioseo_head_json":{"title":"Kraken security incident: What really happened in 2025\/2026","description":"Not a hack, but an insider threat: What really happened at Kraken in 2025 and 2026, how many accounts were affected, and what it means for German users.","canonical_url":"https:\/\/krypto-investigation.de\/en\/sicherheitsvorfall-bei-kraken\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":"&lt;meta name=\"google-site-verification\" content=\"5fwsPGt6weGxnkNKobPDrJvm8Pvb1ts1WG8CLDqVY98\" \/&gt;"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BlogPosting","@id":"https:\/\/krypto-investigation.de\/en\/sicherheitsvorfall-bei-kraken\/#blogposting","name":"Kraken Sicherheitsvorfall: Was 2025\/2026 wirklich passiert ist","headline":"Sicherheitsvorf\u00e4lle bei Kraken 2025\/2026: Was bei der Krypto-B\u00f6rse tats\u00e4chlich passiert ist","author":{"@type":"Person","@id":"https:\/\/krypto-investigation.de\/krypto-forensiker\/david-luedtke\/#forensiker","name":"David L\u00fcdtke","url":"https:\/\/krypto-investigation.de\/krypto-forensiker\/david-luedtke\/"},"publisher":{"@id":"https:\/\/krypto-investigation.de\/en\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/krypto-investigation.de\/wp-content\/uploads\/2025\/07\/kraken_logo.webp","width":1600,"height":900,"caption":"Kraken"},"datePublished":"2025-07-17T11:03:09+02:00","dateModified":"2026-07-11T16:29:42+02:00","inLanguage":"en-GB","mainEntityOfPage":{"@id":"https:\/\/krypto-investigation.de\/en\/sicherheitsvorfall-bei-kraken\/#webpage"},"isPartOf":{"@id":"https:\/\/krypto-investigation.de\/en\/sicherheitsvorfall-bei-kraken\/#webpage"},"articleSection":"Krypto-Neuigkeiten"},{"@type":"BreadcrumbList","@id":"https:\/\/krypto-investigation.de\/en\/sicherheitsvorfall-bei-kraken\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/krypto-investigation.de\/en#listItem","position":1,"name":"Home","item":"https:\/\/krypto-investigation.de\/en","nextItem":{"@type":"ListItem","@id":"https:\/\/krypto-investigation.de\/en\/category\/krypto-neuigkeiten\/#listItem","name":"Krypto-Neuigkeiten"}},{"@type":"ListItem","@id":"https:\/\/krypto-investigation.de\/en\/category\/krypto-neuigkeiten\/#listItem","position":2,"name":"Krypto-Neuigkeiten","item":"https:\/\/krypto-investigation.de\/en\/category\/krypto-neuigkeiten\/","nextItem":{"@type":"ListItem","@id":"https:\/\/krypto-investigation.de\/en\/sicherheitsvorfall-bei-kraken\/#listItem","name":"Sicherheitsvorf\u00e4lle bei Kraken 2025\/2026: Was bei der Krypto-B\u00f6rse tats\u00e4chlich passiert ist"},"previousItem":{"@type":"ListItem","@id":"https:\/\/krypto-investigation.de\/en#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/krypto-investigation.de\/en\/sicherheitsvorfall-bei-kraken\/#listItem","position":3,"name":"Sicherheitsvorf\u00e4lle bei Kraken 2025\/2026: Was bei der Krypto-B\u00f6rse tats\u00e4chlich passiert ist","previousItem":{"@type":"ListItem","@id":"https:\/\/krypto-investigation.de\/en\/category\/krypto-neuigkeiten\/#listItem","name":"Krypto-Neuigkeiten"}}]},{"@type":"FAQPage","@id":"https:\/\/krypto-investigation.de\/en\/sicherheitsvorfall-bei-kraken\/#faq","url":"https:\/\/krypto-investigation.de\/en\/sicherheitsvorfall-bei-kraken\/","mainEntity":[{"@type":"Question","name":"Was ist bei Kraken 2025 wirklich passiert?","acceptedAnswer":{"@type":"Answer","text":"Im Februar 2025 wurde bekannt, dass ein Mitarbeiter des Kraken-Support-Teams Videos interner Systeme aufgezeichnet und in einem kriminellen Forum geteilt hatte. Im Fr\u00fchjahr 2026 folgte ein zweiter, \u00e4hnlicher Vorfall mit einem anderen Mitarbeiter, plus ein Erpressungsversuch durch eine kriminelle Gruppe, den Kraken zur\u00fcckwies. Es war kein externer Hack \u2014 die betroffenen Personen hatten ihren Zugang regul\u00e4r und haben ihn missbraucht."}},{"@type":"Question","name":"Wie viele Nutzerkonten waren betroffen?","acceptedAnswer":{"@type":"Answer","text":"Nach Angaben von Kraken-CSO Nick Percoco wurden \u00fcber beide Vorf\u00e4lle hinweg etwa 2.000 Kundenkonten potenziell eingesehen \u2014 das entspricht rund 0,02 % der globalen Nutzerbasis. Die eingesehenen Daten beschr\u00e4nkten sich auf Kundensupport-Informationen."}},{"@type":"Question","name":"Wurden Kundengelder gestohlen?","acceptedAnswer":{"@type":"Answer","text":"Nein. Kraken hat \u00f6ffentlich klargestellt, dass die Systeme nicht kompromittiert wurden und keine Kundengelder gef\u00e4hrdet waren. Es handelt sich um einen Datenvorfall im Support-Bereich, keinen Diebstahl von Coins."}},{"@type":"Question","name":"Welche konkreten Risiken bestehen f\u00fcr betroffene Kunden?","acceptedAnswer":{"@type":"Answer","text":"Das Hauptrisiko ist gezieltes Phishing in den Wochen und Monaten nach dem Vorfall. Angreifer nutzen geleakte Stammdaten, um echt wirkende Kontaktversuche aufzubauen (\"Ihr Konto zeigt verd\u00e4chtige Aktivit\u00e4t\u2026\"). Wer in dieser Phase Seeds, Passw\u00f6rter oder 2FA-Codes preisgibt, riskiert den Verlust seiner Coins."}},{"@type":"Question","name":"Ist Kraken in Europa reguliert?","acceptedAnswer":{"@type":"Answer","text":"Ja. Kraken hat am 25. Juni 2025 als erste gro\u00dfe globale Krypto-B\u00f6rse eine vollumf\u00e4ngliche MiCAR-Lizenz erhalten \u2014 ausgestellt von der Central Bank of Ireland. Damit ist Kraken berechtigt, in allen 30 EWR-Staaten regulierte Krypto-Dienste anzubieten und unterliegt EU-weiten Aufsichts- und Meldepflichten."}},{"@type":"Question","name":"Was sollte ich tun, wenn ich vermute, betroffen zu sein?","acceptedAnswer":{"@type":"Answer","text":"Wenn Kraken Sie nicht aktiv kontaktiert hat, geh\u00f6ren Sie wahrscheinlich nicht zu den betroffenen Konten. Unabh\u00e4ngig davon empfehlen sich: 2FA \u00fcber Authenticator-App (nicht SMS), Withdrawal-Whitelist aktivieren, separates E-Mail-Konto f\u00fcr B\u00f6rsen verwenden, Best\u00e4nde in eine Hardware Wallet auslagern. Bei einem tats\u00e4chlichen Verlust beauftragen Sie einen Wallet-Check und erstatten Strafanzeige \u2014 die Spur ist auf der Blockchain in jedem Fall dokumentiert."}},{"@type":"Question","name":"Was ist bei Kraken 2025 wirklich passiert?","acceptedAnswer":{"@type":"Answer","text":"Im Februar 2025 wurde bekannt, dass ein Mitarbeiter des Kraken-Support-Teams Videos interner Systeme aufgezeichnet und in einem kriminellen Forum geteilt hatte. Im Fr\u00fchjahr 2026 folgte ein zweiter, \u00e4hnlicher Vorfall mit einem anderen Mitarbeiter, plus ein Erpressungsversuch durch eine kriminelle Gruppe, den Kraken zur\u00fcckwies. Es war kein externer Hack \u2014 die betroffenen Personen hatten ihren Zugang regul\u00e4r und haben ihn missbraucht."}},{"@type":"Question","name":"Wie viele Nutzerkonten waren betroffen?","acceptedAnswer":{"@type":"Answer","text":"Nach Angaben von Kraken-CSO Nick Percoco wurden \u00fcber beide Vorf\u00e4lle hinweg etwa 2.000 Kundenkonten potenziell eingesehen \u2014 das entspricht rund 0,02 % der globalen Nutzerbasis. Die eingesehenen Daten beschr\u00e4nkten sich auf Kundensupport-Informationen."}},{"@type":"Question","name":"Wurden Kundengelder gestohlen?","acceptedAnswer":{"@type":"Answer","text":"Nein. Kraken hat \u00f6ffentlich klargestellt, dass die Systeme nicht kompromittiert wurden und keine Kundengelder gef\u00e4hrdet waren. Es handelt sich um einen Datenvorfall im Support-Bereich, keinen Diebstahl von Coins."}},{"@type":"Question","name":"Welche konkreten Risiken bestehen f\u00fcr betroffene Kunden?","acceptedAnswer":{"@type":"Answer","text":"Das Hauptrisiko ist gezieltes Phishing in den Wochen und Monaten nach dem Vorfall. Angreifer nutzen geleakte Stammdaten, um echt wirkende Kontaktversuche aufzubauen (\"Ihr Konto zeigt verd\u00e4chtige Aktivit\u00e4t\u2026\"). Wer in dieser Phase Seeds, Passw\u00f6rter oder 2FA-Codes preisgibt, riskiert den Verlust seiner Coins."}},{"@type":"Question","name":"Ist Kraken in Europa reguliert?","acceptedAnswer":{"@type":"Answer","text":"Ja. Kraken hat am 25. Juni 2025 als erste gro\u00dfe globale Krypto-B\u00f6rse eine vollumf\u00e4ngliche MiCAR-Lizenz erhalten \u2014 ausgestellt von der Central Bank of Ireland. Damit ist Kraken berechtigt, in allen 30 EWR-Staaten regulierte Krypto-Dienste anzubieten und unterliegt EU-weiten Aufsichts- und Meldepflichten."}},{"@type":"Question","name":"Was sollte ich tun, wenn ich vermute, betroffen zu sein?","acceptedAnswer":{"@type":"Answer","text":"Wenn Kraken Sie nicht aktiv kontaktiert hat, geh\u00f6ren Sie wahrscheinlich nicht zu den betroffenen Konten. Unabh\u00e4ngig davon empfehlen sich: 2FA \u00fcber Authenticator-App (nicht SMS), Withdrawal-Whitelist aktivieren, separates E-Mail-Konto f\u00fcr B\u00f6rsen verwenden, Best\u00e4nde in eine Hardware Wallet auslagern. Bei einem tats\u00e4chlichen Verlust beauftragen Sie einen Wallet-Check und erstatten Strafanzeige \u2014 die Spur ist auf der Blockchain in jedem Fall dokumentiert."}}],"inLanguage":"en-GB","isPartOf":{"@id":"https:\/\/krypto-investigation.de\/en\/#website"},"breadcrumb":{"@id":"https:\/\/krypto-investigation.de\/en\/sicherheitsvorfall-bei-kraken\/#breadcrumblist"}},{"@type":"Organization","@id":"https:\/\/krypto-investigation.de\/en\/#organization","name":"Krypto Investigation","description":"Hilfe bei Krypto-Betrug & Forensik","url":"https:\/\/krypto-investigation.de\/en\/","telephone":"+4915121017420","logo":{"@type":"ImageObject","url":"https:\/\/krypto-investigation.de\/wp-content\/uploads\/2025\/07\/FullLogo_Transparent_NoBuffer.png","@id":"https:\/\/krypto-investigation.de\/en\/sicherheitsvorfall-bei-kraken\/#organizationLogo","width":285,"height":240,"caption":"Krypto Investigation Logo \u2013 Krypto-Forensik und Betrugsaufkl\u00e4rung"},"image":{"@id":"https:\/\/krypto-investigation.de\/en\/sicherheitsvorfall-bei-kraken\/#organizationLogo"}},{"@type":"Person","@id":"https:\/\/krypto-investigation.de\/en\/author\/dluedtke\/#author","url":"https:\/\/krypto-investigation.de\/en\/author\/dluedtke\/","name":"David L\u00fcdtke","image":{"@type":"ImageObject","@id":"https:\/\/krypto-investigation.de\/en\/sicherheitsvorfall-bei-kraken\/#authorImage","url":"https:\/\/krypto-investigation.de\/wp-content\/uploads\/2025\/12\/David-150x150.jpg","width":96,"height":96,"caption":"David L\u00fcdtke"}},{"@type":"WebPage","@id":"https:\/\/krypto-investigation.de\/en\/sicherheitsvorfall-bei-kraken\/#webpage","url":"https:\/\/krypto-investigation.de\/en\/sicherheitsvorfall-bei-kraken\/","name":"Kraken Sicherheitsvorfall: Was 2025\/2026 wirklich passiert ist","description":"Kein Hack, sondern Insider Threat: Was bei Kraken 2025 und 2026 wirklich geschah, wie viele Konten betroffen waren und was es f\u00fcr deutsche Nutzer bedeutet.","inLanguage":"en-GB","isPartOf":{"@id":"https:\/\/krypto-investigation.de\/en\/#website"},"breadcrumb":{"@id":"https:\/\/krypto-investigation.de\/en\/sicherheitsvorfall-bei-kraken\/#breadcrumblist"},"author":{"@id":"https:\/\/krypto-investigation.de\/en\/author\/dluedtke\/#author"},"creator":{"@id":"https:\/\/krypto-investigation.de\/en\/author\/dluedtke\/#author"},"image":{"@type":"ImageObject","url":"https:\/\/krypto-investigation.de\/wp-content\/uploads\/2025\/07\/kraken_logo.webp","@id":"https:\/\/krypto-investigation.de\/en\/sicherheitsvorfall-bei-kraken\/#mainImage","width":1600,"height":900,"caption":"Kraken"},"primaryImageOfPage":{"@id":"https:\/\/krypto-investigation.de\/en\/sicherheitsvorfall-bei-kraken\/#mainImage"},"datePublished":"2025-07-17T11:03:09+02:00","dateModified":"2026-07-11T16:29:42+02:00"},{"@type":"WebSite","@id":"https:\/\/krypto-investigation.de\/en\/#website","url":"https:\/\/krypto-investigation.de\/en\/","name":"Krypto Investigation","description":"Hilfe bei Krypto-Betrug & Forensik","inLanguage":"en-GB","publisher":{"@id":"https:\/\/krypto-investigation.de\/en\/#organization"}}]},"og:locale":"en_GB","og:site_name":"Krypto Investigation - Hilfe bei Krypto-Betrug &amp; Forensik","og:type":"article","og:title":"Kraken Sicherheitsvorfall: Was 2025\/2026 wirklich passiert ist","og:description":"Kein Hack, sondern Insider Threat: Was bei Kraken 2025 und 2026 wirklich geschah, wie viele Konten betroffen waren und was es f\u00fcr deutsche Nutzer bedeutet.","og:url":"https:\/\/krypto-investigation.de\/en\/sicherheitsvorfall-bei-kraken\/","og:image":"https:\/\/krypto-investigation.de\/wp-content\/uploads\/2025\/07\/FullLogo_Transparent_NoBuffer.png","og:image:secure_url":"https:\/\/krypto-investigation.de\/wp-content\/uploads\/2025\/07\/FullLogo_Transparent_NoBuffer.png","article:published_time":"2025-07-17T11:03:09+00:00","article:modified_time":"2026-07-11T14:29:42+00:00","twitter:card":"summary_large_image","twitter:title":"Kraken Sicherheitsvorfall: Was 2025\/2026 wirklich passiert ist","twitter:description":"Kein Hack, sondern Insider Threat: Was bei Kraken 2025 und 2026 wirklich geschah, wie viele Konten betroffen waren und was es f\u00fcr deutsche Nutzer bedeutet.","twitter:image":"https:\/\/krypto-investigation.de\/wp-content\/uploads\/2025\/07\/FullLogo_Transparent_NoBuffer.png"},"aioseo_meta_data":{"post_id":"236128","title":"Kraken security incident: What really happened in 2025\/2026","description":"Not a hack, but an insider threat: What really happened at Kraken in 2025 and 2026, how many accounts were affected, and what it means for German users.","keywords":null,"keyphrases":{"focus":{"keyphrase":"Kraken","score":90,"analysis":{"keyphraseInTitle":{"score":9,"maxScore":9,"error":0},"keyphraseInDescription":{"score":9,"maxScore":9,"error":0},"keyphraseLength":{"score":9,"maxScore":9,"error":0,"length":1},"keyphraseInURL":{"score":5,"maxScore":5,"error":0},"keyphraseInIntroduction":{"score":9,"maxScore":9,"error":0},"keyphraseInSubHeadings":{"score":3,"maxScore":9,"error":1},"keyphraseInImageAlt":[],"keywordDensity":{"type":"best","score":9,"maxScore":9,"error":0}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[{"hidden":false,"schemaBlockId":"aioseo-mpf9njvvgbqb4","tagName":"h3","TrpContentRestriction":{"restriction_type":"exclude","selected_languages":[],"panel_open":true},"answer":"Im Februar 2025 wurde bekannt, dass ein Mitarbeiter des Kraken-Support-Teams Videos interner Systeme aufgezeichnet und in einem kriminellen Forum geteilt hatte. Im Fr\u00fchjahr 2026 folgte ein zweiter, \u00e4hnlicher Vorfall mit einem anderen Mitarbeiter, plus ein Erpressungsversuch durch eine kriminelle Gruppe, den Kraken zur\u00fcckwies. Es war kein externer Hack \u2014 die betroffenen Personen hatten ihren Zugang regul\u00e4r und haben ihn missbraucht.","type":"aioseo\/faq","question":"Was ist bei Kraken 2025 wirklich passiert?"},{"hidden":false,"question":"Wie viele Nutzerkonten waren betroffen?","schemaBlockId":"aioseo-mpf9nrletj02j","tagName":"h3","TrpContentRestriction":{"restriction_type":"exclude","selected_languages":[],"panel_open":true},"answer":"Nach Angaben von Kraken-CSO Nick Percoco wurden \u00fcber beide Vorf\u00e4lle hinweg etwa 2.000 Kundenkonten potenziell eingesehen \u2014 das entspricht rund 0,02 % der globalen Nutzerbasis. Die eingesehenen Daten beschr\u00e4nkten sich auf Kundensupport-Informationen.","type":"aioseo\/faq"},{"hidden":false,"question":"Wurden Kundengelder gestohlen?","schemaBlockId":"aioseo-mpf9ns1fclmoj","tagName":"h3","TrpContentRestriction":{"restriction_type":"exclude","selected_languages":[],"panel_open":true},"answer":"Nein. Kraken hat \u00f6ffentlich klargestellt, dass die Systeme nicht kompromittiert wurden und keine Kundengelder gef\u00e4hrdet waren. Es handelt sich um einen Datenvorfall im Support-Bereich, keinen Diebstahl von Coins.","type":"aioseo\/faq"},{"hidden":false,"question":"Welche konkreten Risiken bestehen f\u00fcr betroffene Kunden?","schemaBlockId":"aioseo-mpf9nscx6ogte","tagName":"h3","TrpContentRestriction":{"restriction_type":"exclude","selected_languages":[],"panel_open":true},"answer":"Das Hauptrisiko ist gezieltes Phishing in den Wochen und Monaten nach dem Vorfall. Angreifer nutzen geleakte Stammdaten, um echt wirkende Kontaktversuche aufzubauen (\"Ihr Konto zeigt verd\u00e4chtige Aktivit\u00e4t\u2026\"). Wer in dieser Phase Seeds, Passw\u00f6rter oder 2FA-Codes preisgibt, riskiert den Verlust seiner Coins.","type":"aioseo\/faq"},{"hidden":false,"question":"Ist Kraken in Europa reguliert?","schemaBlockId":"aioseo-mpf9nsnca8hi5","tagName":"h3","TrpContentRestriction":{"restriction_type":"exclude","selected_languages":[],"panel_open":true},"answer":"Ja. Kraken hat am 25. Juni 2025 als erste gro\u00dfe globale Krypto-B\u00f6rse eine vollumf\u00e4ngliche MiCAR-Lizenz erhalten \u2014 ausgestellt von der Central Bank of Ireland. Damit ist Kraken berechtigt, in allen 30 EWR-Staaten regulierte Krypto-Dienste anzubieten und unterliegt EU-weiten Aufsichts- und Meldepflichten.","type":"aioseo\/faq"},{"hidden":false,"question":"Was sollte ich tun, wenn ich vermute, betroffen zu sein?","schemaBlockId":"aioseo-mpf9nsz3a4c87","tagName":"h3","TrpContentRestriction":{"restriction_type":"exclude","selected_languages":[],"panel_open":true},"answer":"Wenn Kraken Sie nicht aktiv kontaktiert hat, geh\u00f6ren Sie wahrscheinlich nicht zu den betroffenen Konten. Unabh\u00e4ngig davon empfehlen sich: 2FA \u00fcber Authenticator-App (nicht SMS), Withdrawal-Whitelist aktivieren, separates E-Mail-Konto f\u00fcr B\u00f6rsen verwenden, Best\u00e4nde in eine Hardware Wallet auslagern. Bei einem tats\u00e4chlichen Verlust beauftragen Sie einen Wallet-Check und erstatten Strafanzeige \u2014 die Spur ist auf der Blockchain in jedem Fall dokumentiert.","type":"aioseo\/faq"}],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"BlogPosting","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"seo_analyzer_scan_date":"2026-07-11 15:19:24","breadcrumb_settings":null,"limit_modified_date":false,"open_ai":"{\"title\":{\"suggestions\":[],\"usage\":0},\"description\":{\"suggestions\":[],\"usage\":0}}","ai":{"faqs":[],"keyPoints":[],"schemas":[],"titles":[],"descriptions":[],"socialPosts":{"email":[],"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"created":"2025-09-12 06:55:24","updated":"2026-07-11 15:19:24"},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/krypto-investigation.de\/en\" title=\"Home\">Home<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/krypto-investigation.de\/en\/category\/krypto-neuigkeiten\/\" title=\"Krypto-Neuigkeiten\">Krypto-Neuigkeiten<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\tSicherheitsvorf\u00e4lle bei Kraken 2025\/2026: Was bei der Krypto-B\u00f6rse tats\u00e4chlich passiert ist\n<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/krypto-investigation.de\/en"},{"label":"Krypto-Neuigkeiten","link":"https:\/\/krypto-investigation.de\/en\/category\/krypto-neuigkeiten\/"},{"label":"Sicherheitsvorf\u00e4lle bei Kraken 2025\/2026: Was bei der Krypto-B\u00f6rse tats\u00e4chlich passiert ist","link":"https:\/\/krypto-investigation.de\/en\/sicherheitsvorfall-bei-kraken\/"}],"_links":{"self":[{"href":"https:\/\/krypto-investigation.de\/en\/wp-json\/wp\/v2\/posts\/236128","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/krypto-investigation.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/krypto-investigation.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/krypto-investigation.de\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/krypto-investigation.de\/en\/wp-json\/wp\/v2\/comments?post=236128"}],"version-history":[{"count":1,"href":"https:\/\/krypto-investigation.de\/en\/wp-json\/wp\/v2\/posts\/236128\/revisions"}],"predecessor-version":[{"id":238302,"href":"https:\/\/krypto-investigation.de\/en\/wp-json\/wp\/v2\/posts\/236128\/revisions\/238302"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/krypto-investigation.de\/en\/wp-json\/wp\/v2\/media\/236130"}],"wp:attachment":[{"href":"https:\/\/krypto-investigation.de\/en\/wp-json\/wp\/v2\/media?parent=236128"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/krypto-investigation.de\/en\/wp-json\/wp\/v2\/categories?post=236128"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/krypto-investigation.de\/en\/wp-json\/wp\/v2\/tags?post=236128"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}