Chainstack discloses production systems breach
Original title: Chainstack Reports Production Systems Breach Exposing Customer Data and Password Hashes
An attacker accessed part of Chainstack's production environment on October 31, 2026, gaining access to customer account information, email addresses, and password hashes.
Chainstack detected unauthorized access to part of its infrastructure through a third-party component on October 31, 2026. The attacker had access to a database with customer account details and node credentials. The company is hardening systems and asking customers to rotate credentials and update passwords.
Unconfirmed: The specific attacker and full scope of the incident are not publicly detailed.
- The intrusion was detected on October 31, 2026.
- The attacker also had access to systems holding node credentials.
- The breach is part of an AI-powered attack campaign assessed to share overlaps with China-linked cluster using ARTEX.
Impact: exposure of customer account information and password hashes
- 1.rotate node credentials
- 2.regenerate platform API keys
- 3.update passwords
- Vendors
- Chainstack
- Organizations
- ChainalysisWorkOS
From the original article
3 min read at thehackernews.com
Blockchain infrastructure provider Chainstack on Tuesday disclosed that it was targeted in a cyber attack that allowed an unauthorized party to gain access to some parts of its infrastructure. The incident is assessed to be part of a large-scale, artificial intelligence (AI)-powered attack campaign that came to light last week. "An external attacker gained unauthorized access to part of
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.