Chainalysis says attackers stole credentials and live tokens of all its customers
Blockchain analysis firm Chainalysis has acknowledged that attackers obtained personal data, password hashes and live access tokens for all of its users. Its customers include US government agencies and major private companies.
Chainalysis, a blockchain analysis company, has said that hackers who breached its network obtained sensitive information on all of its users, including names, usernames, password hashes (scrambled representations of passwords) and live access tokens. Because the firm serves both government bodies and private businesses, the theft could be a significant gain for the attackers.
Who the customers are
Chainalysis and public sources have named a long list of clients. It includes the FBI, US Immigration and Customs Enforcement (ICE) and the US Air Force, as well as companies such as Microsoft, Coinbase and Barclays. It remains unclear whether the theft has exposed customers to further threats.
How the incident unfolded
Last Friday, Chainalysis said it had been the target of a cybersecurity incident in October, similar to attacks on other platforms during the same month. An outside actor used techniques assisted by AI agents to gain unauthorized access to company systems and internal tools. In an email to affected customers, the company said "non-sensitive" data had been accessed: user IDs, full names, email addresses and organization role labels. It is not clear why such details were considered non-sensitive.
In an update on Wednesday, the company said part of what it called an "ongoing multifront cyberattack" was an "on-path attack" that exposed a subset of customer passwords. It added that the attack vector had been identified and fixed. An on-path attack, also called an adversary-in-the-middle attack, occurs when a hacker gains access to infrastructure that carries traffic between two parties.
Chainalysis has not yet said where the infrastructure compromise happened, or whether the data taken from it was encrypted with TLS, the protocol that protects data in transit.
