Chainalysis confirms hackers stole credentials and tokens for all customers
Original title: Chainalysis says hackers stole credentials and tokens for all of its customers
Hackers obtained names, usernames, password hashes, and live tokens for all Chainalysis customers; high-profile clients include FBI, Microsoft, and Coinbase.
Chainalysis suffered a breach where hackers accessed sensitive personal data including names, usernames, password hashes, and live tokens for all users. The company sent an email to affected customers stating some non-sensitive data was also accessed. High-profile clients such as government agencies and companies including Microsoft, Coinbase, and Barclays are among those impacted.
Unconfirmed: It's unclear if the data theft exposed customers to additional threats.
- Data stolen: names, usernames, password hashes, and live tokens for all customers
- Attack used AI agent-assisted offensive techniques
- Clients include FBI, ICE, US Air Force, Microsoft, Coinbase, Barclays
- On-path attack exposed some passwords; attack vector identified and fixed
Impact: personal credentials and tokens for all customers
- 1.Review affected accounts for suspicious activity
- 2.Monitor for phishing or unauthorized access
- Vendors
- Chainalysis
- Products
- Chainalysis platform
From the original article
1 min read at arstechnica.com
Company said a "multifront cyberattack" included AI agents and an on-path data snatch.
By Dan Goodin · arstechnica.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.