Chainalysis says attack exposed user credentials and live tokens
Chainalysis says its ongoing investigation into an agentic cyber attack on its systems found that names, usernames, password hashes and live tokens were exposed for all users.
Written by a model from the sources below. Verify against them.
- Vendor
- Chainalysis
- Product
- KYT
- Status
- Confirmed
- Disclosed
- Data taken
- Names, Password hashes, Email addresses, Tokens and keys
Summary
The company says it removed access to Reactor and Data Solutions while investigating and that it has no evidence investigation data was accessed.
What to do
Change your password there and anywhere you reused it, and turn on multi-factor authentication
For password hashesRotate API keys and tokens you gave it, and review the OAuth apps and integrations connected to it
For tokens and keysExpect phishing that uses this breach; verify messages that mention it
For email addressesReset your Chainalysis password and any password reused elsewhere
Revoke and reissue any Chainalysis API keys or live tokens
Enable multi-factor authentication on your Chainalysis account
Rotate any Chainalysis API keys, passwords, and integration credentials now
Review Chainalysis account and API access logs for unfamiliar activity
Timeline
- Made public by The Hacker News
- First seen by cve.now1 day
- Confirmed by Chainalysis
BleepingComputer: “Blockchain intelligence firm Chainalysis says a recent attack on its systems and internal tools has exposed credentials and live tokens for all customers.”
- Record last updated
What was taken
| Taken | Per the source |
|---|---|
| Names, Password hashes | The Hacker News: “Blockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic cyber attack targeting its systems also exposed names, userna…” |
| Email addresses | Mastodon: “A recent Chainalysis breach has raised security concerns, exposing sensitive information including usernames, password hashes, live tokens, and personal data s…” |
| Tokens and keys | BleepingComputer: “On Monday, we discovered certain customer information including names, usernames, password hashes and live tokens for all Chainalysis users were exposed to a m…” |
Evidence 18
- SocialMastodon
“A recent Chainalysis breach has raised security concerns, exposing sensitive information including usernames, password hashes, live tokens, and personal data such as user IDs, full names, and email addresses.”
- Social
- Social
- SocialBluesky
“Chainalysis Updates Breach Scope to All User Data”
- SocialBluesky
“Chainalysis says a cyber intrusion exposed password hashes and live tokens, while its investigation and attribution data remain intact.”
Show all 18 sourcesShow fewer sources
- PressThe Hacker News
“Blockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic cyber attack targeting its systems also exposed names, usernames, password hashes and live tokens for all users.”
- Social
- SocialMastodon
“A recent cyber attack on Chainalysis has compromised user credentials, forcing the company to shut down key services and lock affected accounts while it strengthens its security measures.”
- SocialMastodon
“Chainalysis breach: names, usernames, password hashes and live API tokens for all users exposed, found while investigating an "agentic" intrusion.”
- SocialMastodon
“Chainalysis says an attack exposed credentials for all users and forced key services offline.”
- PressBleepingComputer
“Blockchain intelligence firm Chainalysis says a recent attack on its systems and internal tools has exposed credentials and live tokens for all customers.”
+1 more: BleepingComputer on Bluesky - SocialMastodon
“A shocking data breach at blockchain intelligence firm Chainalysis has exposed sensitive customer credentials, including names, usernames, and password hashes, to a malicious actor, putting users worldwide at risk.”
- SocialBluesky
“Chainalysis confirms cyber incident exposing credentials for all users.”
- SocialMastodon
“Reset your passwords and rotate your API keys the moment Chainalysis restores access — follow their official recovery instructions, not whatever your guild is yelling in chat.”
- SocialHacker News
“Chainalysis says breach exposed password hashes and live tokens”
- SocialHacker News
“Chainalysis says hackers stole credentials and tokens for all of its customers”
- SocialBluesky
“The blockchain analytics firm trusted by governments and crypto exchanges worldwide disclosed that attackers made off with login data and access tokens…”
- SocialMastodon
“https:// arstechnica.com/security/2026/ 11/chainalysis-says-hackers-stole-credentials-and-tokens-for-all-of-its-customers/”
Corrections
None so far.
Something wrong on this page? Report an error. Every fix is listed here.
Questions about the Chainalysis breach
Was Chainalysis breached?
Yes. Chainalysis says so: “Blockchain intelligence firm Chainalysis says a recent attack on its systems and internal tools has exposed credentials and live tokens for all customers.” (BleepingComputer).
What data was exposed?
Names, Password hashes, Email addresses, Tokens and keys.
What should Chainalysis customers do?
Change your password there and anywhere you reused it, and turn on multi-factor authentication. Rotate API keys and tokens you gave it, and review the OAuth apps and integrations connected to it. Expect phishing that uses this breach; verify messages that mention it. Reset your Chainalysis password and any password reused elsewhere. Revoke and reissue any Chainalysis API keys or live tokens. Enable multi-factor authentication on your Chainalysis account. Rotate any Chainalysis API keys, passwords, and integration credentials now. Review Chainalysis account and API access logs for unfamiliar activity.