Allium security breach disrupts services used by Visa, Stripe, Coinbase

Allium, the blockchain data provider serving major financial institutions including Visa, Stripe and Coinbase, has confirmed unauthorized access to some of its systems, prompting API key revocations and service interruptions following an October 25 security incident. Summary Allium identified unauthorized access to certain systems on October 25 and hired an independent cybersecurity investigator. The company restored its primary application and Explorer APIs after several days of service interruptions. Allium revoked existing API keys and recommended password changes and multifactor authentication for customers. Some datasets required backfilling, while Allium Assistant and its MCP service remained unavailable during recovery. Allium, whose customers include major financial institutions, raised $40 million in Series B funding in June. According to an official security update, CEO and co-founder Ethan Chan said the company restricted access after detecting the intrusion, notified affected customers and hired an independent cybersecurity firm to investigate. Allium has restored its main application and Explorer APIs, although several features remain unavailable. At the same time, the...