Chainalysis says some information on all users was exposed in cyberattack
Chainalysis said Wednesday night that some information belonging to all of its users was exposed in a cyberattack.
Written by a model from the sources below. Verify against them.
- Vendor
- Chainalysis
- Status
- Confirmed
- Disclosed
- Data taken
- Names, Email addresses, Password hashes, Tokens and keys
Summary
According to the report, the company's website says its users include those in the law enforcement and national security sectors.
What to do
Change your password there and anywhere you reused it, and turn on multi-factor authentication
For password hashesRotate API keys and tokens you gave it, and review the OAuth apps and integrations connected to it
For tokens and keysExpect phishing that uses this breach; verify messages that mention it
For email addressesReview your Chainalysis account for unfamiliar logins or activity
Change your Chainalysis password and rotate any linked API keys
Enable multi-factor authentication on your account
Timeline
- Made public by The Record2 days
- First seen by cve.now1 day
- Confirmed by Chainalysis
The Record: “In its latest update , posted Wednesday night, the company said it had discovered “certain customer information including names, usernames, password hashes and…”
- Record last updated
What was taken
| Taken | Per the source |
|---|---|
| Names, Email addresses, Password hashes, Tokens and keys | Mastodon: “A recent Chainalysis breach has raised security concerns, exposing sensitive information including usernames, password hashes, live tokens, and personal data s…” |
Evidence 8
- SocialMastodon
“https://www. securityweek.com/chainalysis-d iscloses-data-breach-following-ai-driven-cyberattack”
- SocialBluesky
“Chainalysis Discloses Data Breach Following AI-Driven Cyberattack”
- PressThe Record
“Chainalysis, the blockchain analytics company, said Wednesday night that some information belonging to all its users — which its website says include those in the law enforcement and national security sectors — had been exposed in a cyberattack.”
- Social
- SocialBluesky
“Chainalysis discloses breach by attacker using 'offensive agentic techniques'; customer names and emails accessed”
Show all 8 sourcesShow fewer sources
- SocialBluesky
“Chainalysis confirms security breach affecting its entire user base.”
- SocialMastodon
“🗞 Chainalysis warns all users hit in cyber breach involving ‘agentic’ techniques via The Record”
- SocialMastodon
“A recent Chainalysis breach has raised security concerns, exposing sensitive information including usernames, password hashes, live tokens, and personal data such as user IDs, full names, and email addresses.”
Corrections
None so far.
Something wrong on this page? Report an error. Every fix is listed here.
Questions about the Chainalysis breach
Was Chainalysis breached?
Yes. Chainalysis says so: “In its latest update , posted Wednesday night, the company said it had discovered “certain customer information including names, usernames, password hashes and live tokens for all Chainalysis users were exposed to a malicious actor.”” (The Record).
What data was exposed?
Names, Email addresses, Password hashes, Tokens and keys.
What should Chainalysis customers do?
Change your password there and anywhere you reused it, and turn on multi-factor authentication. Rotate API keys and tokens you gave it, and review the OAuth apps and integrations connected to it. Expect phishing that uses this breach; verify messages that mention it. Review your Chainalysis account for unfamiliar logins or activity. Change your Chainalysis password and rotate any linked API keys. Enable multi-factor authentication on your account.