Chainalysis says attack exposed credentials and live tokens for all customers
Chainalysis says a recent attack on its systems and internal tools exposed credentials and live tokens for all customers.
Written by a model from the sources below. Verify against them.
- Vendor
- Chainalysis
- Status
- Confirmed
- Disclosed
- Data taken
- Names, Email addresses, Password hashes, Tokens and keys
Summary
The item reports this claim from BleepingComputer and does not describe the scope or the attacker.
What to do
Change your password there and anywhere you reused it, and turn on multi-factor authentication
For password hashesRotate API keys and tokens you gave it, and review the OAuth apps and integrations connected to it
For tokens and keysExpect phishing that uses this breach; verify messages that mention it
For email addressesRotate any Chainalysis API keys, tokens, and passwords now.
Review recent activity on Chainalysis accounts and integrations for unexpected access.
Follow Chainalysis's official notices for confirmed scope and remediation steps.
Enable multi-factor authentication on accounts that connect to Chainalysis.
Timeline
- Made public by BleepingComputer on Bluesky
- Confirmed by Chainalysis
BleepingComputer on Bluesky: “"On Monday, we discovered certain customer information including names, usernames, password hashes and live tokens for all Chainalysis users were exposed to a…”
1 day - First seen by cve.now1 day
- Record last updated
What was taken
| Taken | Per the source |
|---|---|
| Names, Email addresses | BleepingComputer on Bluesky: “This follows the company's disclosure last Friday that attackers using AI tools accessed customers' names, email addresses, user IDs, and organizational role l…” |
| Password hashes | BleepingComputer on Bluesky: “"On Monday, we discovered certain customer information including names, usernames, password hashes and live tokens for all Chainalysis users were exposed to a…” |
| Tokens and keys | BleepingComputer on Bluesky: “Blockchain intelligence firm Chainalysis says a recent attack on its systems and internal tools has exposed credentials and live tokens for all customers.” |
Evidence 4
- PressBleepingComputer on Bluesky
“Blockchain intelligence firm Chainalysis says a recent attack on its systems and internal tools has exposed credentials and live tokens for all customers.”
- Social
- SocialHacker News
“Chainalysis says breach exposed credentials for all customers”
- SocialBluesky
“Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services”
Corrections
None so far.
Something wrong on this page? Report an error. Every fix is listed here.
Questions about the Chainalysis breach
Was Chainalysis breached?
Yes. Chainalysis says so: “"On Monday, we discovered certain customer information including names, usernames, password hashes and live tokens for all Chainalysis users were exposed to a malicious actor," it said in a Wednesday update.” (BleepingComputer on Bluesky).
What data was exposed?
Names, Email addresses, Password hashes, Tokens and keys.
What should Chainalysis customers do?
Change your password there and anywhere you reused it, and turn on multi-factor authentication. Rotate API keys and tokens you gave it, and review the OAuth apps and integrations connected to it. Expect phishing that uses this breach; verify messages that mention it. Rotate any Chainalysis API keys, tokens, and passwords now. Review recent activity on Chainalysis accounts and integrations for unexpected access. Follow Chainalysis's official notices for confirmed scope and remediation steps. Enable multi-factor authentication on accounts that connect to Chainalysis.