Chainalysis breach exposes credentials and live tokens for all customers

· Cybersecurity · United States

Blockchain intelligence firm Chainalysis disclosed that an attack on its systems and internal tools exposed credentials and live tokens for all of its customers, including names, usernames, password hashes and active session tokens. The company described the incident as an agentic cyber attack and said it removed access to Reactor and Data Solutions while investigating; it said the investigation is ongoing. Chainalysis sells blockchain analytics and compliance tools to law enforcement, exchanges and financial institutions, so the exposure reaches well beyond its own staff. The breach forces every customer to rotate credentials and tokens and raises questions about how far an AI-driven intrusion spread inside a security-sensitive vendor.

Why it matters：A breach at a vendor trusted by law enforcement and financial institutions shows how a single supplier's compromise can force mass credential rotation across its entire customer base.

Key points

  • Exposed data includes names, usernames, password hashes and live tokens for all users.
  • Chainalysis removed access to its Reactor and Data Solutions services during the investigation.
  • The company characterized the intrusion as an agentic cyber attack.

Sources (original reporting)

More stories from this day