Chainalysis confirms user credentials exposed in cyberattack, takes services offline

Blockchain analytics firm Chainalysis has confirmed that hackers exposed password hashes and live tokens belonging to its users during a cyberattack that forced several of its investigation and transaction monitoring services offline. Summary Chainalysis confirmed that customer names, usernames, password hashes and live tokens belonging to all users were exposed to a malicious actor during a cyberattack. The company took KYT, Reactor, Data Solutions and other screening products offline after detecting suspicious activity, with some customer accounts potentially accessed without authorization. Chainalysis identified an on path attack that exposed a subset of customer passwords and said the attack method had since been contained and remediated. Customers will be required to reset passwords and rotate API keys where appropriate, while Chainalysis works to restore access through approved IP addresses. According to a November 4 security update, the company discovered that customer information, including names, usernames, password hashes and live tokens for all Chainalysis users, had been exposed to a malicious actor. The latest disclosure expands on an October 30 statement in which Chai...