{
  "version": 1,
  "event_id": "evt_ac308632afb3e340",
  "url": "https://xiyu.news/events/evt_ac308632afb3e340/",
  "json": "https://xiyu.news/api/events/evt_ac308632afb3e340.json",
  "type": "security_incident",
  "status": "monitoring",
  "category": "crypto",
  "title": {
    "zh": "Kraken 拒绝就客户数据失窃支付勒索赎金",
    "en": "Kraken Refuses To Pay Extortion Demand Over Stolen Client Data - CoinMarketCap"
  },
  "current_state": {
    "zh": "Kraken 在客户数据被窃取后公开拒绝支付勒索赎金，没有接受攻击者提出的条件。该事件被描述为一起“内部人员攻击”，即数据是被拥有合法内部权限的人拿走的，而非单纯依靠外部入侵获得。\n\n一家大型交易所公开拒付赎金，为加密企业如何应对数据勒索提供了公开先例，也把行业关注点推向内部人员风险、用户隐私以及交易所对外宣传的安全实践。同时，这也提高了 Kraken 用户与监管机构面临的敏感度，因为泄露的身份数据可能被用于钓鱼、账户接管尝试，甚至对持币人进行人身层面的定向威胁。\n\n该事件凸显出边界防护、加密与多因素认证针对的是外部攻击者，对已经持有有效凭证的内部员工几乎无效，因此内部权限管理与行为监控才是关键的缓解手段。Kraken 的法定名称为 Payward, Inc.，成立于 2011 年，截至 2025 年其季度交易量约为 2070 亿美元，是全球规模最大的交易所之一。",
    "en": "Kraken has refused to pay an extortion demand after client data was stolen, highlighting ongoing security challenges for cryptocurrency exchanges."
  },
  "first_seen_at": "2026-09-11T05:06:14.958408+00:00",
  "last_updated_at": "2026-09-11T05:06:14.958408+00:00",
  "last_material_change_at": "2026-09-11T05:06:14.958408+00:00",
  "confidence": 0.75,
  "updates_count": 1,
  "sources_count": 1,
  "entities": [
    "client",
    "coinmarketcap",
    "data",
    "demand",
    "extortion",
    "kraken",
    "over",
    "pay",
    "refuses",
    "stolen"
  ],
  "identifiers": [],
  "topics": [
    "data-breach",
    "extortion",
    "kraken"
  ],
  "updates": [
    {
      "update_id": "upd_a63fed1a3f7e255c",
      "event_id": "evt_ac308632afb3e340",
      "occurred_at": "2026-09-10T19:54:39Z",
      "published_at": "2026-09-10T19:54:39Z",
      "first_seen_at": "2026-09-11T05:06:14.958408Z",
      "time_precision": "published",
      "update_type": "initial",
      "material_change": true,
      "title_zh": "Kraken 拒绝就客户数据失窃支付勒索赎金",
      "title_en": "Kraken Refuses To Pay Extortion Demand Over Stolen Client Data - CoinMarketCap",
      "what_changed_zh": "Kraken 在客户数据被窃取后公开拒绝支付勒索赎金，没有接受攻击者提出的条件。该事件被描述为一起“内部人员攻击”，即数据是被拥有合法内部权限的人拿走的，而非单纯依靠外部入侵获得。\n\n一家大型交易所公开拒付赎金，为加密企业如何应对数据勒索提供了公开先例，也把行业关注点推向内部人员风险、用户隐私以及交易所对外宣传的安全实践。同时，这也提高了 Kraken 用户与监管机构面临的敏感度，因为泄露的身份数据可能被用于钓鱼、账户接管尝试，甚至对持币人进行人身层面的定向威胁。\n\n该事件凸显出边界防护、加密与多因素认证针对的是外部攻击者，对已经持有有效凭证的内部员工几乎无效，因此内部权限管理与行为监控才是关键的缓解手段。Kraken 的法定名称为 Payward, Inc.，成立于 2011 年，截至 2025 年其季度交易量约为 2070 亿美元，是全球规模最大的交易所之一。",
      "what_changed_en": "Kraken has refused to pay an extortion demand after client data was stolen, highlighting ongoing security challenges for cryptocurrency exchanges.",
      "current_state_zh": "Kraken 在客户数据被窃取后公开拒绝支付勒索赎金，没有接受攻击者提出的条件。该事件被描述为一起“内部人员攻击”，即数据是被拥有合法内部权限的人拿走的，而非单纯依靠外部入侵获得。\n\n一家大型交易所公开拒付赎金，为加密企业如何应对数据勒索提供了公开先例，也把行业关注点推向内部人员风险、用户隐私以及交易所对外宣传的安全实践。同时，这也提高了 Kraken 用户与监管机构面临的敏感度，因为泄露的身份数据可能被用于钓鱼、账户接管尝试，甚至对持币人进行人身层面的定向威胁。\n\n该事件凸显出边界防护、加密与多因素认证针对的是外部攻击者，对已经持有有效凭证的内部员工几乎无效，因此内部权限管理与行为监控才是关键的缓解手段。Kraken 的法定名称为 Payward, Inc.，成立于 2011 年，截至 2025 年其季度交易量约为 2070 亿美元，是全球规模最大的交易所之一。",
      "current_state_en": "Kraken has refused to pay an extortion demand after client data was stolen, highlighting ongoing security challenges for cryptocurrency exchanges.",
      "detailed_summary_zh": "Kraken has refused to pay an extortion demand after client data was stolen, highlighting ongoing security challenges for cryptocurrency exchanges.",
      "detailed_summary_en": "Kraken has refused to pay an extortion demand after client data was stolen, highlighting ongoing security challenges for cryptocurrency exchanges.",
      "background_zh": "Kraken（法定名称为 Payward Inc.）是一家成立于 2011 年的美国加密货币交易所，也是首家获得银行牌照的加密公司；到 2025 年，其季度交易量约为 2070 亿美元。加密交易所因同时持有高价值资产和大量客户身份数据，长期是网络犯罪的目标。以泄露窃取数据相威胁的勒索行为在该行业已相当普遍，Coinbase 在 2025 年 5 月曾披露，犯罪分子在其用户数据遭泄露后向其勒索 2000 万美元。",
      "background_en": "Kraken, legally Payward Inc., is a US-based cryptocurrency exchange founded in 2011 and was the first crypto company to obtain a bank charter; by 2025 it handled roughly $207 billion in quarterly trading volume. Crypto exchanges are recurring targets for cybercrime because they hold both valuable assets and large stores of customer identity data. Extortion campaigns that threaten to leak stolen data have become common in the sector, with Coinbase reporting in May 2025 that criminals sought $20 million from it after compromising user data.",
      "community_discussion_zh": "",
      "community_discussion_en": "",
      "market_impact_zh": "主要传导渠道是信任与声誉，而非流动性或供给：任何关于交易所所持身份数据被泄露的看法，都可能促使用户重新评估资产托管地点；Kraken 拒绝谈判也可能影响未来针对交易所的攻击者的预期收益。该事件不涉及客户资金或余额，因此对交易量或资产价格的直接影响有限。",
      "market_impact_en": "The primary transmission channel is trust and reputation rather than liquidity or supply: any perception that exchange-held identity data is exposed can push users to reassess where they custody assets, and Kraken's refusal to negotiate may influence the expected payoff for future attackers targeting exchanges. The story does not involve client funds or balances, so its direct effect on trading volumes or asset prices is limited.",
      "importance_score": 7.5,
      "references": [
        {
          "url": "https://www.bleepingcomputer.com/news/security/crypto-exchange-kraken-extorted-by-hackers-after-insider-breach/",
          "title": "Crypto-exchange Kraken extorted by hackers after insider breach"
        },
        {
          "url": "https://www.coindesk.com/business/2026/04/13/crypto-exchange-kraken-targeted-in-extortion-attempt-but-says-there-was-no-breach-and-no-client-funds-at-risk",
          "title": "Crypto exchange Kraken targeted in extortion attempt but says ..."
        },
        {
          "url": "https://cointelegraph.com/news/kraken-extortion-attempt-but-funds-never-at-risk",
          "title": "Kraken Won‘t Negotiate After Extortion Attempt with Client Data"
        },
        {
          "url": "https://en.wikipedia.org/wiki/Kraken_(cryptocurrency_exchange)",
          "title": "Kraken (cryptocurrency exchange)"
        },
        {
          "url": "https://www.safestate.com/post/kraken-data-breach-extortion-inside-the-insider-attack",
          "title": "Kraken Data Breach Extortion: Inside the Insider Attack"
        },
        {
          "url": "https://therecord.media/nearly-70000-impacted-coinbase-breach?_hsmi=362627429",
          "title": "Nearly 70,000 impacted by Coinbase breach involving $20 million..."
        }
      ],
      "confidence": 0.75,
      "story_ids": [
        "google_news:article:400eba9b141e13a1"
      ],
      "sources": [
        {
          "url": "https://news.google.com/rss/articles/CBMipwFBVV95cUxOeEJEbFZ5bTFMNlg3NGliOUdTenFfTXdYV0tDdXVxSHJLbG1DQVkyR256SWJEV3l6UXZaWlE5d1VpeEdlM1hXd2dXbmFWVFFxbHZnVVA1em9Tc1pXMEJHQUlqcVZDX0J1VjVkVlhBWVNSZUt6ZVVQLTUxdEppdWRTdENHRnJETnluSlBXR3RsMVhiZzhKYTIzb04wUUxPMndBNlV2cVFHUQ?oc=5",
          "label": "CoinMarketCap",
          "source_type": "google_news",
          "official": false
        }
      ]
    }
  ]
}