Trending

    Chainalysis Confirms Full User Exposure of Names Password Hashes and Live Tokens After Multifront Cyberattack

    Section editor: ·Moderate6 articles covering this·6 news sources·Updated about 1 hour ago·World
    Share:
    Minimalist dark digital graphic representing the Chainalysis breach with glowing data points and cybersecurity breach motifs

    What happened

    Blockchain analytics leader Chainalysis confirmed a multifront cyberattack exposed the names, usernames, password hashes, and active session tokens for its entire user base.

    The Context

    • AI-assisted intrusion vector: Unidentified attackers deployed offensive agentic AI tools alongside an on-path attack detected on October 30, 2026, forcing core services including Reactor, KYT, and Data Solutions offline.
    • Client base perimeter: The platform acts as critical infrastructure for global financial institutions like Coinbase and federal agencies like the FBI, though Chainalysis reports core investigative datasets and attribution records were not accessed or altered.
    • Phased infrastructure recovery: Restoration began on November 6, 2026, gated behind mandatory system-wide password updates and strict customer IP allowlisting.

    The Number

    100%

    — the share of Chainalysis user accounts compromised with exposed credentials and live tokens, triggering an immediate credential-revocation cycle across the crypto-compliance sector.

    Takeaway

    Expect compliance and intelligence providers to rapidly phase out legacy session management in favor of zero-trust verification and agentic threat defenses.

    6 Articles
    NewsBTC

    Chainalysis Begins Restoring Screening Services After Disclosing Exposed Password Hashes

    Blockchain analytics firm Chainalysis said on November 6 it was restoring its KYT and address screening services in phases after a cyberattack, following an earlier disclosure that password hashes and other user data had been exposed. The incident fo...

    about 5 hours ago
    Read Full Article
    Ars Technica

    Chainalysis says hackers stole credentials and tokens for all of its customers

    Chainalysis, the blockchain analytics firm, said hackers stole credentials and tokens affecting all of its customers in a "multifront cyberattack" that included AI agents and an on-path data snatch, according to reporting by Ars Technica.

    Ars Technica — All

    Chainalysis says hackers stole credentials and tokens for all of its customers

    Chainalysis, the blockchain analytics firm, said hackers stole credentials and tokens affecting all of its customers in a "multifront cyberattack" that included AI agents and an on-path data snatch, according to reporting by Ars Technica.

    TechRadar

    Chainalysis admits all users affected in major data breach — names, usernames, password hashes, and live tokens all exposed

    Chainalysis, the blockchain analytics firm, has admitted that all of its users were affected in a major data breach in which names, usernames, password hashes and live tokens were exposed. To contain the attack, the company shut down multiple service...

    Cointelegraph

    Chainalysis says breach exposed password hashes and live tokens

    Chainalysis, a blockchain analytics firm, disclosed that a security breach exposed password hashes and live tokens after it had initially reported only non-sensitive customer data was accessed, according to Cointelegraph. The revised disclosure signi...

    Crypto News

    Chainalysis confirms user credentials exposed in cyberattack, takes services offline

    Blockchain analytics firm Chainalysis has confirmed that hackers exposed password hashes and live tokens belonging to its users during a cyberattack that forced several of its investigation and transaction monitoring services offline, according to a ...

    Bitcoin.com

    Chainalysis Breach Exposes Passwords and Tokens for All Users, Forcing Service Shutdowns

    Chainalysis, a blockchain analytics firm, reported a security breach in which customer data was exposed, with the base report claiming passwords and tokens were compromised for all users and that services were forced to shut down. Coverage from other...