Key facts
- Chainalysis said names, usernames, password hashes and live tokens for all users were exposed to a malicious actor.
- Chainalysis said it did not disclose whether every type of information was exposed for every user.
- Chainalysis said an on-path attack exposed some customers' passwords and that it contained and remediated that vector.
- Chainalysis said it was locking affected accounts and requiring password resets.
- Chainalysis said it had no evidence attackers accessed investigation data or manipulated its attribution data.
Chainalysis said on November 4 that a cyberattack exposed names, usernames, password hashes and live tokens for all of its users, widening an incident the blockchain analytics firm first described on October 30 as involving only non-sensitive customer information.
In an update to its incident notice, Chainalysis said it discovered on November 2 that the information had been exposed to a malicious actor. The company did not disclose whether each type of information was exposed for every user and declined to give Cointelegraph additional information beyond its published disclosure.
Chainalysis initially said on October 30 that the intrusion exposed user IDs, names and email addresses and that it found no evidence attackers had accessed authentication credentials or session tokens. A second update on November 4 stated that an on-path attack exposed some customers' passwords. The company said it had contained and remediated that attack vector and was locking affected accounts and requiring password resets.
Despite the broader exposure, Chainalysis said it still had no evidence that attackers accessed investigation data or manipulated its attribution data.