[CLSTR]
API
< Back to all clusters
[TECHNOLOGY] · United States · 10 sources

started · updated

Part of situation: Chainalysis cybersecurity breach (4 clusters)

Chainalysis reports breach exposing credentials and tokens for all users

Chainalysis cybersecurity breach blockchain analytics on-path attack authentication tokens

Blockchain analytics firm Chainalysis has disclosed that a cybersecurity incident has exposed sensitive data for all of its users. The compromised information includes names, usernames, password hashes, and live authentication tokens.

The breach, which escalated from an initial October report, involved an “on-path attack” (also known as a man-in-the-middle attack) that intercepted communications. This allowed attackers to access credentials that the company previously believed were secure. Chainalysis is directly notifying customers whose Know Your Transaction (KYT) accounts appear to have been accessed without authorization.

In response to the incident, the company took several core services offline, including the KYT interface and API, Reactor, Data Solutions, and its login page. To restore access, the firm is implementing new security protocols, such as requiring customers to provide trusted IP addresses for an allowlist, resetting passwords, and rotating API keys.

Chainalysis stated it has found no evidence that confidential investigation data was accessed or that its blockchain attribution data was manipulated. The company’s client base includes government agencies like the FBI and US Air Force, as well as private entities such as Microsoft, Coinbase, and various financial institutions.

Entities

Chainalysis · Coinbase · FBI · Microsoft · US Air Force

Claims

What the coverage asserts, and how many sources carry each claim.

Sources

Chainalysis says hackers stole credentials and tokens for all of its customers [arstechnica.com]
Chainalysis Breach Exposes Password Hashes and Live Tokens [www.esecurityplanet.com]
Chainalysis hack exposed every user's password hash [www.cryptopolitan.com]
Chainalysis Says Breach Exposed Credentials For All Customers - Slashdot [it.slashdot.org]
Self Custody Wallet Wake-Up: What Does the Chainalysis Breach Mean? [www.dcforecasts.com]
Chainalysis: empresa de inteligência em blockchain sofre ataque e expõe clientes [jornal24horas.com.br]
Chainalysis Breach: What Stolen Logins Mean for Customers [savedelete.com]
Chainalysis says hackers stole credentials and tokens for all of its customers [cybernoz.com]
Chainalysis, credenziali e token esposti per tutti i clienti [www.forux.it]
Chainalysis Says Live Tokens for All Users Were Exposed in Its Breach | CryptoCompass [cryptocompass.com]