# SZB-2b061c991a: Chainalysis says some information on all users was exposed in cyberattack

Chainalysis said Wednesday night that some information belonging to all of its users was exposed in a cyberattack.

- Type: Breach
- Status: Confirmed
- Vendor: Chainalysis
- Disclosed: 2026-11-02 16:20 UTC
- Data taken: Names, Email addresses, Password hashes, Tokens and keys
- Sources: 8 distinct
- First seen by cve.now: 2026-11-04 13:08 UTC · Updated: 2026-11-05 19:00 UTC

Written by a model from the sources below. Verify against them.

## Summary

According to the report, the company's website says its users include those in the law enforcement and national security sectors.

## What to do

- Change your password there and anywhere you reused it, and turn on multi-factor authentication · For password hashes
- Rotate API keys and tokens you gave it, and review the OAuth apps and integrations connected to it · For tokens and keys
- Expect phishing that uses this breach; verify messages that mention it · For email addresses
- Review your Chainalysis account for unfamiliar logins or activity
- Change your Chainalysis password and rotate any linked API keys
- Enable multi-factor authentication on your account

## Timeline

- 2026-11-02 16:20 UTC: Made public by The Record
- 2026-11-04 13:08 UTC: First seen by cve.now
- 2026-11-05 00:00 UTC: Confirmed by Chainalysis. The Record: “In its latest update , posted Wednesday night, the company said it had discovered “certain customer information including names, usernames, password hashes and…” ([source](https://therecord.media/chainalysis-all-users-hit-by-agentic-cyberattack))
- 2026-11-05 19:00 UTC: Record last updated

## What was taken

- Names, Email addresses, Password hashes, Tokens and keys: [Mastodon](https://mastodon.social/@Analyst207/117565350976318290): “A recent Chainalysis breach has raised security concerns, exposing sensitive information including usernames, password hashes, live tokens, and personal data such as user IDs, full names, and email addresses.”

## Evidence (8 sources)

- 2026-11-02 · Social · [Mastodon](https://infosec.exchange/@security_crawler_carl/117547757510421182): “https://www. securityweek.com/chainalysis-d iscloses-data-breach-following-ai-driven-cyberattack”
- 2026-11-04 · Social · [Bluesky](https://bsky.app/profile/patrickcmiller.bsky.social/post/3mzitxbh3dg22): “Chainalysis Discloses Data Breach Following AI-Driven Cyberattack”
- 2026-11-05 · Press · [The Record](https://therecord.media/chainalysis-all-users-hit-by-agentic-cyberattack): “Chainalysis, the blockchain analytics company, said Wednesday night that some information belonging to all its users — which its website says include those in the law enforcement and national security sectors — had been exposed in a cyberattack.”
- 2026-11-05 · Social · [Bluesky](https://bsky.app/profile/hs47641.bsky.social/post/3mzk2ehtki42m): “Chainalysis Discloses Separate October 30 Security Incident Involving User Data” (+1 more: [Bluesky](https://bsky.app/profile/crypto.at.thenote.app/post/3mzkiywkk722r))
- 2026-11-05 · Social · [Bluesky](https://bsky.app/profile/aithreat.io/post/3mzknbfaxvr2l): “Chainalysis discloses breach by attacker using 'offensive agentic techniques'; customer names and emails accessed”
- 2026-11-05 · Social · [Bluesky](https://bsky.app/profile/gazewires.bsky.social/post/3mzkr75lw6c2k): “Chainalysis confirms security breach affecting its entire user base.”
- 2026-11-05 · Social · [Mastodon](https://mastodon.social/@ninjaintelgroup/117564820864531123): “🗞 Chainalysis warns all users hit in cyber breach involving ‘agentic’ techniques via The Record”
- 2026-11-05 · Social · [Mastodon](https://mastodon.social/@Analyst207/117565350976318290): “A recent Chainalysis breach has raised security concerns, exposing sensitive information including usernames, password hashes, live tokens, and personal data such as user IDs, full names, and email addresses.”

## Corrections

None so far.

Something wrong on this page? Report an error: https://github.com/sazabi/cve.now/issues/new?title=Wrong%20fact%20on%20SZB-2b061c991a&body=https%3A%2F%2Fcve.now%2FSZB-2b061c991a%0A%0AWhat%20is%20wrong%2C%20and%20the%20source%20that%20shows%20it%3A%0A

## Questions about the Chainalysis breach

### Was Chainalysis breached?

Yes. Chainalysis says so: “In its latest update , posted Wednesday night, the company said it had discovered “certain customer information including names, usernames, password hashes and live tokens for all Chainalysis users were exposed to a malicious actor.”” (The Record).

Source: https://therecord.media/chainalysis-all-users-hit-by-agentic-cyberattack

### What data was exposed?

Names, Email addresses, Password hashes, Tokens and keys.

### What should Chainalysis customers do?

Change your password there and anywhere you reused it, and turn on multi-factor authentication. Rotate API keys and tokens you gave it, and review the OAuth apps and integrations connected to it. Expect phishing that uses this breach; verify messages that mention it. Review your Chainalysis account for unfamiliar logins or activity. Change your Chainalysis password and rotate any linked API keys. Enable multi-factor authentication on your account.

## Related

- Started as early warning SZB-2b061c991a, first seen 2026-11-04 13:08 UTC
- Browse: [Breaches](https://cve.now/breaches.md) · [Early warnings](https://cve.now/early-warnings.md)

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/SZB-2b061c991a
Site guide for agents: https://cve.now/llms.txt