Chainalysis Says Attack Exposed All Users’ Credentials, Takes Services Offline
Summary
Chainalysis says its investigation found names, usernames, password hashes and live tokens for all users exposed. It took services offline and locked affected accounts, with password resets and API-key rotation planned; it says there is no evidence investigation datawas
Key points
- Chainalysis says its investigation found names, usernames, password hashes and live tokens for all users exposed.
- The company says there is no evidence that investigation data was accessed or its attribution data manipulated.
- Chainalysis took Reactor, Data Solutions, KYT and Address Screening services, along with the login page, offline and locked impacted accounts.
- The company plans to restore some services and require password resets and API-key rotation; it says a prior on-path attack exposed a subset of customer passwords and that the attack vector was addressed.
- Microsoft reports that agentic AI tools are being used to find exposed secrets in public GitHub repositories and access cloud resources; in some cases, agents exfiltrated Azure Key Vault secrets.
- Google reports resale operations using stolen AWS Bedrock keys to offer access to commercial AI models; it says there is no evidence those operators caused the initial compromises.
Article Details
- Victim Organization
- Chainalysis
- Victim Domain
- chainalysis.com
- Incident Type
- Cyberattack involving unauthorized access to Chainalysis systems and internal tools. Chainalysis also reported an on-path attack that exposed a subset of customer passwords.
- Data Types Exposed
- Names
- Usernames
- Password hashes
- Live tokens
- A subset of customer passwords
- Affected Records
- All users' credentials and related information were reported exposed; the number of users was not disclosed.
- Operational Impact
- Chainalysis took Reactor, Data Solutions, the Know Your Transaction (KYT) user interface and API, address screening products, and the login page offline. It locked impacted accounts and said users would need to reset passwords and rotate API keys before access was restored. Chainalysis said it had no evidence that investigation data was accessed or attribution data manipulated.
- Claim Status
- confirmed
Indicators of compromise
| Type | Indicator | Context |
|---|---|---|
| DOMAIN | llm-routing[.]com | Identified as an LLM-access resale operation leveraging stolen AWS Bedrock keys; the source says there is no evidence its operators carried out the initial compromises. |
| DOMAIN | xingjiabiapi[.]org | Identified as an LLM-access resale operation leveraging stolen AWS Bedrock keys; the source says there is no evidence its operators carried out the initial compromises. |
| IPV4 | 199[.]19[.]77[.]18 | Microsoft reported this as an origin IP for sign-in activity involving compromised applications across targeted tenants. |
| IPV4 | 199[.]19[.]77[.]84 | Microsoft reported this as an origin IP for sign-in activity involving compromised applications across targeted tenants. |
| IPV4 | 23[.]106[.]46[.]239 | IP linked to llm-routing[.]com that reportedly hosted an ARTEX landing page and was flagged by Zeabur as an indicator of compromise. |
MITRE ATT&CK
T1078.004 · Cloud AccountsThe reported activity used compromised application credentials for sign-ins across cloud tenants.T1528 · Steal Application Access TokenAgents reportedly obtained a token for a single-tenant OAuth application and used the compromised application to enumerate cloud resources.T1552.001 · Credentials In FilesAgents searched public GitHub repositories for exposed secrets and credentials.
Vendors
Amazon Web ServicesThe Google-owned subsidiary also said it identified at least two resale operations leveraging stolen AWS Bedrock keys obtained from two different organizations – llm-routing[.]com (momo) and xingjiabiapi[.]org – both ofChainalysisBlockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic cyber attack targeting its systems also exposed names, usernames, password hashes and live tokens for all users.MicrosoftAccording to Microsoft, threat actors are using an agentic AI offensive framework to search public GitHub repositories for exposed secrets, such as credentials, application credentials, and AI inference-related API keys
Products
Address Screeningadding it took the Know Your Transaction (KYT) user interface and API offline, alongside other address screening products and the login page.AWS BedrockThe Google-owned subsidiary also said it identified at least two resale operations leveraging stolen AWS Bedrock keys obtained from two different organizations – llm-routing[.]com (momo) and xingjiabiapi[.]org – both ofAzureIn at least one case, an AI agent is said to have progressed from scanning GitHub for secrets to exfiltrating data from Azure Key Vault in just five minutes. The activity is assessed to be ongoing from August 2026.Azure AIIn addition, the threat actor has been observed attempting to steal Azure resources, including compromised Azure AI services, likely as part of efforts to facilitate broader attack activity.Azure Cognitive ServicesAI service providers and OAuth applications with access to Foundry Tools (previously known as Azure Cognitive Services)," Microsoft said.Azure Key VaultIn at least one case, an AI agent is said to have progressed from scanning GitHub for secrets to exfiltrating data from Azure Key Vault in just five minutes. The activity is assessed to be ongoing from August 2026.Azure Kubernetes Servicestrings and publishing credentials, AI and machine learning (ML) connections and datastores, and Azure Kubernetes Service (AKS) user credentials. The compromised applications subsequently accessed SharePoint andData Solutions"While we investigated, we removed access to Reactor and Data Solutions," the company said. "At this time we continue to have no evidence that any investigations data has been accessed or Chainalysis attribution dataFoundry Toolsto AI services, such as API keys for major AI service providers and OAuth applications with access to Foundry Tools (previously known as Azure Cognitive Services)," Microsoft said.Know Your Transaction (KYT)additional proactive monitoring systems to detect unusual activity, adding it took the Know Your Transaction (KYT) user interface and API offline, alongside other address screening products and the login page.Microsoft 365 Apps for Enterprisecredentials to access Microsoft Entra ID tenants of certain organizations and connected Azure and Microsoft 365 resources. The sign-in events originated from two IP addresses, 199.19.77[.]84 and 199.19.77[.]18.Microsoft Entra IDto post-exploitation activity involving the misuse of valid application credentials to access Microsoft Entra ID tenants of certain organizations and connected Azure and Microsoft 365 resources. The sign-inReactor"While we investigated, we removed access to Reactor and Data Solutions," the company said. "At this time we continue to have no evidence that any investigations data has been accessed or Chainalysis attribution data
Tools
Industries
Artificial intelligenceincluding Chainstack, OpenCode, Warp, and WorkOS, have disclosed that they have been targeted by artificial intelligence (AI)-driven attacks, some of which involve an autonomous penetration testing tool called ARTEX.Cloud servicesapplication credentials, and AI inference-related API keys across multiple applications and cloud services, to conduct follow-on attacks.