FreeLLMChainalysis breach exposes credentials and tokens for all customers
Hackers accessed names, usernames, password hashes and live tokens of every Chainalysis user, prompting mandatory password resets.
Chainalysis reported that a cyberattack in October led to theft of personal data for all its users. The breach exposed names, usernames, password hashes and live tokens.
The attackers employed AI‑agent‑assisted techniques and an on‑path, or adversary‑in‑the‑middle, attack that revealed a subset of customer passwords.
Affected customers include the FBI, US Immigration and Customs Enforcement, the US Air Force, Microsoft, Coinbase and Barclays.
Chainalysis responded by taking Reactor, Data Solutions, KYT and address screening offline, locking accounts and requiring every user to reset passwords and rotate API keys.
On Nov 6 the company began a phased restoration of KYT and address screening, asking customers to submit trusted IP addresses for an allowlist.
What it means for you
The incident shows that credentials used to access AI and blockchain services can be compromised at scale, so users must treat passwords and API keys as high‑value secrets.
Sources
- Chainalysis says hackers stole credentials and tokens for all of its customers, Ars Technica, 6 Nov 2026
- Updated Nov 6: Chainalysis Security Incident Information - Chainalysis, chainalysis.com (official), 30 Oct 2026
Written automatically from the sources above, then checked by our code: every number and name must appear in them, and no sentence may copy a source. Spotted a mistake? Report it.
Which AI can you use for free today?
Every free AI model, ranked by blind human votes, with the memory and speed it needs on your own GPU.