Chainalysis Says Breach Exposed Credentials for All Customers

Blockchain intelligence firm Chainalysis says a breach exposed credentials and live tokens for all its customers. The company provides tools to trace cryptocurrency transactions and investigate crimes including fraud, ransomware and money laundering.

Chainalysis said attackers accessed customer names, usernames, password hashes and live tokens. It had earlier disclosed that attackers using what it called “offensive agentic techniques” accessed names, email addresses, user IDs and organizational role labels. The company later said the incident involved an “on-path attack,” also known as a man-in-the-middle attack.

Chainalysis said it has found no evidence that attackers accessed investigative graph data or changed its blockchain attribution repositories. It locked accounts as a precaution and asked customers to reset passwords. After detecting further abnormal activity, it took its login portal, Reactor and Data Solutions, its Know-Your-Transaction (KYT) interface and API, and address screening products offline.

The company is asking customers to provide trusted IP addresses to regain access to the portal when it returns. Users will be required to reset passwords and rotate API keys as applicable before registering transactions. Chainalysis said it is working to secure its systems and restore Reactor and Data Solutions.