Chainstack reports unauthorized access to parts of its infrastructure
Blockchain infrastructure provider Chainstack disclosed on Tuesday that it was targeted in a cyber attack that let an unauthorized party access some parts of its infrastructure.
Written by a model from the sources below. Verify against them.
- Vendor
- Chainstack
- Status
- Confirmed
- Disclosed
- Data taken
- Names, Email addresses, Password hashes
Summary
The company said the incident is assessed to be part of a large-scale, AI-powered attack campaign that surfaced the previous week, and the visible text is truncated, so the headline's claims about customer data and password hashes are not confirmed here.
What to do
Change your password there and anywhere you reused it, and turn on multi-factor authentication
For password hashesExpect phishing that uses this breach; verify messages that mention it
For email addressesReset your Chainstack account passwords and any API keys or secrets stored with the service
Enable multi-factor authentication on your Chainstack account
Check Chainstack's official status page and advisories for confirmed scope and affected data
Timeline
- Attackers got in
The Hacker News: “…gained access to a development environment on October 26, 2026, and then escalated their access to break into "some parts of our production environment."”
5 days · attackers inside - Discovered
The Hacker News: “The intrusion was subsequently detected on October 31, 2026, and the attacker's access was cut off that same day, the company noted.”
- Attackers' access ended3 days
- Made public by The Hacker News
- Confirmed by Chainstack
The Hacker News: “"An external attacker gained unauthorized access to part of Chainstack's infrastructure through a third-party component," the company said .”
- First seen by cve.now
What was taken
| Taken | Per the source |
|---|---|
| Names, Email addresses, Password hashes | The Hacker News: “As part of the digital break-in, the threat actor is said to have accessed a database containing customer account information, including organization names, ac…” |
Evidence 4
- PressThe Hacker News
“Blockchain infrastructure provider Chainstack on Tuesday disclosed that it was targeted in a cyber attack that allowed an unauthorized party to gain access to some parts of its infrastructure.”
- Social
- Socialr/cybersecurity
“Chainstack Discloses Breach of Production Systems; Customer Emails and Password Hashes Accessed”
- SocialBluesky
“Chainstack Reports Production Systems Breach Exposing Customer Data and Password Hashes”
Corrections
- Changed “Email addresses of organization members on Chainstack were exposed” to “Email addresses of email addresses of organization’s members on Chainstack were exposed”.
- Changed “Email addresses of email addresses of organization’s members on Chainstack were exposed” to “Email addresses were exposed”.
- Removed “The attackers got in through a third-party vendor”: its source no longer supports it.
Something wrong on this page? Report an error. Every fix is listed here.
Questions about the Chainstack breach
Was Chainstack breached?
Yes. Chainstack says so: “"An external attacker gained unauthorized access to part of Chainstack's infrastructure through a third-party component," the company said .” (The Hacker News).
What data was exposed?
Names, Email addresses, Password hashes.
What should Chainstack customers do?
Change your password there and anywhere you reused it, and turn on multi-factor authentication. Expect phishing that uses this breach; verify messages that mention it. Reset your Chainstack account passwords and any API keys or secrets stored with the service. Enable multi-factor authentication on your Chainstack account. Check Chainstack's official status page and advisories for confirmed scope and affected data.