Chainalysis says names, usernames, password hashes and live tokens belonging to all users of its blockchain analytics platform were exposed to a malicious actor, widening the scope of a breach first disclosed in October.
In its November 4 incident update, the company said the data was discovered Monday and that it still had no evidence investigation data had been accessed or its attribution data manipulated.
The new disclosure expands on the initial customer-data exposure, which had listed user IDs, names, email addresses and organization roles. Chainalysis also confirmed that an on-path attack exposed passwords for a subset of customers. It said the attack vector had been contained and remediated, and that affected accounts were locked as a precaution.
After detecting abnormal activity on November 4, Chainalysis took its Know Your Transaction (KYT) interface and API, other address-screening products and its login page offline. Reactor and Data Solutions had already been taken offline. The company said it was directly notifying customers whose KYT accounts appeared to have been accessed without authorization.
Chainalysis said it intended to begin restoring KYT and Address Screening on November 5 behind customer IP allowlists, after which users could reset passwords and rotate API keys as appropriate. The company reiterated that the incident was unrelated to Binance’s separate $6.3 billion crypto theft.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
