Skip to content
NewA calmer, faster ZeroHour
StoryData breachhighExploited in the wild

Chainalysis breach exposes all customers' credentials, takes products offline

3 sources · 3 articlesFirst reported Updated ()
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Chainalysis says an attack exposed names, usernames, password hashes and live tokens for all customers, and key products remain offline.

Chainalysis confirmed a breach that exposed names, usernames, password hashes and live tokens for all customers. It earlier described AI-assisted access limited to non-sensitive identity metadata, then said an on-path, AI agent-assisted attack exposed credentials. The company locked accounts and took the login portal, Reactor, KYT, Data Solutions and address screening offline, restoring access only from customer-supplied trusted IP addresses. It reports no evidence that investigation graphs or blockchain attribution data were accessed or changed. Customers must reset passwords and rotate API keys. Ars Technica says some passwords were exposed and that the attack vector was identified and fixed.

Key facts
  • Names, usernames, password hashes and live tokens exposed for all customers.
  • Login, Reactor, KYT, Data Solutions and address screening taken offline.
  • Chainalysis first described the impact as limited to identity metadata.
  • Company reports no access to investigation graphs or attribution data.
  • Users must reset passwords and rotate API keys.
  • Ars Technica names FBI, Microsoft, Coinbase and Barclays among clients.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

What each outlet adds

beyond the shared facts
  • BleepingComputerInitial limited disclosure, trusted-IP restoration, and no graph access.
  • Ars TechnicaNamed high-profile clients and says the attack vector was fixed.
  • The Hacker NewsMulti-front agentic AI attack and password resets on other systems.
Vendors
Chainalysis
Products
ReactorData SolutionsKYTChainalysis platformAddress Screening
Victims
ChainalysisFBIICEMicrosoftCoinbaseBarclays

Coverage

oldest first · one row per article · UTC
  1. · 6d ago The Hacker NewsFirst report

    Chainalysis Breach Exposes All Users' Credentials

    AI-driven on-path attack exposed names, usernames, password hashes and live tokens for all Chainalysis users; KYT and login page taken offline.

  2. · 6d ago BleepingComputer

    Chainalysis says breach exposed every customer's credentials and tokens

    The login portal, Reactor, KYT, and address screening are offline; users must reset passwords and rotate API keys.

  3. · 6d ago Ars Technica · Security

    Chainalysis confirms hackers stole credentials and tokens for all customers

    Hackers obtained names, usernames, password hashes, and live tokens for all Chainalysis customers; high-profile clients include FBI, Microsoft, and Coinbase.