Chainalysis Says Attack Exposed Customer Password Hashes and Live Tokens
Summary
Chainalysis says an attack exposed names, usernames, password hashes, and live tokens for all customers. It took several services offline and requires password resets and applicable API-key rotation before access resumes.
Key points
- Chainalysis says customer names, usernames, password hashes, and live tokens were exposed to a malicious actor.
- The company described the exposure as resulting from an on-path attack.
- Chainalysis says it has no evidence that investigative graph data was accessed or blockchain attribution repositories were altered.
- The company took its login portal, Reactor, Data Solutions, KYT interface and API, and address-screening products offline after detecting further abnormal activity.
- Customers must use trusted IP addresses to regain access and reset passwords; API keys must also be rotated where applicable.
Article Details
- Victim Organization
- Chainalysis
- Victim Domain
- chainalysis.com
- Incident Type
- System breach involving an on-path (Man-in-the-Middle) attack and exposure of customer credentials and live tokens
- Data Types Exposed
- Names
- Email addresses
- User IDs
- Organizational role labels
- Usernames
- Password hashes
- Live tokens
- Affected Records
- Credentials and live tokens for all Chainalysis users were exposed; the number of users was not disclosed.
- Operational Impact
- Chainalysis took its login portal, Reactor, Data Solutions, the Know-Your-Transaction (KYT) user interface and API, and address screening products offline after detecting further abnormal activity. It required users to reset passwords and rotate API keys, and requested trusted IP addresses before restoring account access. The company reported no evidence that investigative graph data was accessed or blockchain attribution repositories were altered.
- Claim Status
- confirmed
MITRE ATT&CK
Vendors
Products
Data Solutionsbefore signing in again, it has now taken the login portal offline, together with Reactor and Data Solutions, the Know-Your-Transaction (KYT) user interface and API, and address screening products, afterKnow Your Transaction (KYT)it has now taken the login portal offline, together with Reactor and Data Solutions, the Know-Your-Transaction (KYT) user interface and API, and address screening products, after discovering further abnormalReactorreset their passwords before signing in again, it has now taken the login portal offline, together with Reactor and Data Solutions, the Know-Your-Transaction (KYT) user interface and API, and address screening
Industries
CryptocurrencyChainalysis provides blockchain analysis tools to trace cryptocurrency transactions and investigate crimes such as fraud, ransomware, and money laundering.GovernmentIts customer list includes law enforcement, government agencies, financial institutions, insurance companies, and cryptocurrency businesses worldwide.Law enforcementIts customer list includes law enforcement, government agencies, financial institutions, insurance companies, and cryptocurrency businesses worldwide.