Chainalysis says breach exposed password hashes and live tokens

Latest NewsPublishedNov 6, 2026Chainalysis disclosed password hashes and live tokens were exposed after initially reporting only non-sensitive customer data was accessed.Chainalysis on Wednesday disclosed a wider impact from a cyberattack it initially described as involving only non-sensitive customer information.“On Monday, we discovered certain customer information including names, usernames, password hashes and live tokens for all Chainalysis users were exposed to a malicious actor,” the blockchain analytics firm said in an update to its incident notice.The company did not disclose whether each type of information was exposed for every user and declined to provide Cointelegraph with additional information beyond its published disclosure.Chainalysis initially said on Oct. 30 that the intrusion exposed user IDs, names and email addresses but found no evidence that attackers accessed authentication credentials or session tokens.Another Wednesday update stated an “on-path attack” exposed some customers’ passwords. The company said it had contained and remediated that attack vector and was locking affected accounts and requiring password resets.Despite the broader exposure, Chainalys...