Chainalysis says breach exposed every customer's credentials and tokens
Original title: Chainalysis says breach exposed credentials for all customers
The login portal, Reactor, KYT, and address screening are offline; users must reset passwords and rotate API keys.
Chainalysis said an attack on its systems exposed names, usernames, password hashes, and live tokens for all customers. It earlier described AI-assisted access to non-sensitive identity metadata, then said an on-path attack exposed credentials. The company reports no evidence that investigation graphs or blockchain attribution data were accessed or changed. It locked accounts, took several products offline, and is restoring access only from customer-supplied trusted IP addresses.
Unconfirmed: Chainalysis says it has no evidence that investigation or attribution data was accessed or altered.
- Customers include law enforcement, governments, financial firms, insurers, and crypto businesses.
- The company first called the impact limited to identity metadata.
- Password hashes and live tokens for every user were later confirmed exposed.
- Users must reset passwords and rotate API keys before registering transactions.
- Reactor, Data Solutions, KYT, and address screening remain offline.
Impact: All customers' credentials, password hashes, and live tokens exposed
- 1.Send trusted IP addresses to Chainalysis for the login allowlist.
- 2.Reset passwords and rotate API keys before registering transactions.
- Vendors
- Chainalysis
- Products
- ReactorData SolutionsKYT
- Victims
- Chainalysis
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| support@chainalysis.com | s brought back online and reset their credentials. "Contact support@chainalysis.com or your Chainalysis account team with trusted IP addresses |
From the original article
2 min read at bleepingcomputer.com
Blockchain intelligence firm Chainalysis says a recent attack on its systems and internal tools has exposed credentials and live tokens for all customers. [...]
By Sergiu Gatlan · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.