Chainalysis says hackers obtained customer data and live tokens for all of its users

Blockchain analysis firm Chainalysis says hackers obtained sensitive personal information for all of its users after a breach of its network security. The data reportedly includes names, usernames, password hashes and live tokens.

The company first disclosed in a recent update that it had been the target of a cybersecurity incident in October, one similar to attacks on other platforms that month. It said the attackers used AI agent-assisted techniques to access its systems and internal tools. Later, it said an on-path attack, also called an adversary-in-the-middle attack, exposed a subset of customer passwords and that the attack route had been identified and fixed.

In response, Chainalysis took down its login page and its know-your-transaction service, which monitors threats to cryptocurrency holdings in real time, and removed access to its Reactor and Data Solutions services. It later began restoring customer access to KYT and Address Screening, and asked customers to submit trusted IP addresses for an allow list and to prepare to reset their credentials. Chainalysis counts government agencies, including the FBI, ICE and the U.S. Air Force, and companies such as Microsoft, Coinbase and Barclays among its customers. It is unclear whether the exposed data creates additional threats for those customers.