Chainalysis breach exposes all users credentials and tokens
Original title: Chainalysis warns all users hit in cyber breach involving ‘agentic’ techniques
Chainalysis suffered a breach exposing names usernames password hashes and live tokens for all users including law enforcement and national security sectors using offensive agentic techniques.
Chainalysis the blockchain analytics company disclosed that some information belonging to all its users had been exposed in a cyberattack. The company initially disclosed the breach on October 30 but later found certain customer information including names usernames password hashes and live tokens for all users were exposed to a malicious actor. The perpetrator was not identified. Chainalysis detected an external actor using offensive agentic techniques to gain unauthorized access. All users must reset passwords and rotate API keys. Some customers accounts on the Know Your Transaction service appeared accessed. The suspected account access occurred amid an ongoing multifront cyberattack with on-path interception contained and remediated. Services such as KYT address screening and login page were taken offline and planned restoration was scheduled for Thursday.
- Exposed credentials for all Chainalysis users
- Engaged third-party experts for investigation
- Affected sectors include law enforcement national security and cryptocurrency
- KYT service and address screening taken offline for remediation
Impact: customer names usernames password hashes live tokens and potential access to KYT service
- 1.Reset passwords and rotate API keys
- 2.Visit login page directly rather than follow reset links
- 3.Submit trusted IPs for allowlist to restore KYT service
- Vendors
- Chainalysis
- Victims
- Chainalysis users
From the original article
3 min read at therecord.mediaChainalysis, the blockchain analytics company, said Wednesday night that some information belonging to all its users — which its website says include those in the law enforcement and national security sectors — had been exposed in a cyberattack.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.