Chainalysis breach exposes credentials and tokens for all customers
Hackers accessed names, usernames, password hashes and live tokens of every Chainalysis user, prompting mandatory password resets.
Chainalysis reported that a cyberattack in October led to theft of personal data for all its users. The breach exposed names, usernames, password hashes and live tokens.
The attackers employed AI‑agent‑assisted techniques and an on‑path, or adversary‑in‑the‑middle, attack that revealed a subset of customer passwords.
Affected customers include the FBI, US Immigration and Customs Enforcement, the US Air Force, Microsoft, Coinbase and Barclays.
Chainalysis responded by taking Reactor, Data Solutions, KYT and address screening offline, locking accounts and requiring every user to reset passwords and rotate API keys.
On Nov 6 the company began a phased restoration of KYT and address screening, asking customers to submit trusted IP addresses for an allowlist.
Qué significa para ti
The incident shows that credentials used to access AI and blockchain services can be compromised at scale, so users must treat passwords and API keys as high‑value secrets.
Fuentes
- Chainalysis says hackers stole credentials and tokens for all of its customers, Ars Technica, 6 Nov 2026
- Updated Nov 6: Chainalysis Security Incident Information - Chainalysis, chainalysis.com (official), 30 Oct 2026
Escrito automáticamente a partir de las fuentes anteriores, luego revisado por nuestro código: cada número y nombre debe aparecer en ellas, y ninguna oración puede copiar una fuente. ¿Detectaste un error? Infórmalo.
¿Qué IA puedes usar gratis hoy?
Todos los modelos de IA gratuitos, clasificados por votos humanos ciegos, con la memoria y velocidad que necesita tu GPU.