Skip to content
NewA calmer, faster ZeroHour
StoryData breachhighExploited in the wild

Chainalysis Breach Exposes All Users' Credentials via Agentic Attack

5 sources · 5 articlesFirst reported Updated ()
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Chainalysis breach exposed names, usernames, password hashes, and live tokens for all customers using AI agentic techniques.

Chainalysis suffered a cyber breach where attackers gained access using agentic AI techniques and on-path interception, exposing sensitive data including names, usernames, password hashes, and live tokens for all users. Affected parties include law enforcement agencies, governments, financial firms, Microsoft, Coinbase, and others. The company took products like KYT, Reactor, login page, and address screening offline for remediation and is restoring access with enhanced protections. No evidence suggests access to investigation graphs or blockchain data was obtained.

Key facts
  • Exposed data for all users: names, usernames, password hashes, live tokens
  • Attack used agentic AI and on-path techniques
  • Affected sectors: law enforcement, national security, crypto businesses
  • Services: KYT, Reactor, login page, address screening taken offline
  • Users must reset passwords and rotate API keys
  • High-profile clients include FBI, ICE, Microsoft, Coinbase
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Oct 30, 2026Chainalysis discloses initial breach findings · The Record
  2. Oct 30, 2026Chainalysis detects unauthorized access via agentic techniques · The Register
  3. Nov 5, 2026Chainalysis confirms agentic on-path attack exposed data for all users · The Register
  4. Nov 5, 2026Services including KYT and Reactor taken offline · BleepingComputer
  5. Nov 6, 2026Reports detail exposure of live tokens for all customers · Ars Technica
  6. Nov 6, 2026Chainalysis plans to restore services with added protections · The Hacker News

What each outlet adds

beyond the shared facts
  • The RecordWarns all users hit in breach including law enforcement and national security
  • The RegisterDetails October crypto-tracker hack and law enforcement tokens packed
  • BleepingComputerFirst called impact limited to identity metadata then confirmed more data
  • Ars TechnicaHigh-profile clients including FBI, ICE, Microsoft, Coinbase, Barclays
  • The Hacker NewsAI-driven on-path attack exposed credentials for all users
Vendors
Chainalysis
Products
ReactorData SolutionsKYTChainalysis platformAddress Screening
Victims
ChainalysisChainalysis usersFBIICEMicrosoftCoinbaseBarclays

Coverage

oldest first · one row per article · UTC
  1. · 4d ago The RecordFirst report

    Chainalysis breach exposes all users credentials and tokens

    Chainalysis suffered a breach exposing names usernames password hashes and live tokens for all users including law enforcement and national security sectors using offensive agentic techniques.

  2. · 3d ago The Register · Security

    Chainalysis hack exposes passwords and tokens

    Attackers used agentic on-path techniques to steal usernames, password hashes and live tokens from Chainalysis systems.

  3. · 3d ago The Hacker News

    Chainalysis Breach Exposes All Users' Credentials

    AI-driven on-path attack exposed names, usernames, password hashes and live tokens for all Chainalysis users; KYT and login page taken offline.

  4. · 3d ago BleepingComputer

    Chainalysis says breach exposed every customer's credentials and tokens

    The login portal, Reactor, KYT, and address screening are offline; users must reset passwords and rotate API keys.

  5. · 2d ago Ars Technica · Security

    Chainalysis confirms hackers stole credentials and tokens for all customers

    Hackers obtained names, usernames, password hashes, and live tokens for all Chainalysis customers; high-profile clients include FBI, Microsoft, and Coinbase.