Chainalysis on Wednesday disclosed a wider impact from a cyberattack it initially described as involving only non-sensitive customer information.
“On Monday, we discovered certain customer information including names, usernames, password hashes and live tokens for all Chainalysis users were exposed to a malicious actor,” the blockchain analytics firm <a href="https://www.chainalysis.com/blog/security-incident-october-30/" rel="noopener noreferrer nofollow">said</a> in an update to its incident notice.
The company did not disclose whether each type of information was exposed for every user and declined to provide Cointelegraph with additional information beyond its published disclosure.
<a href="https://ct.com/news/blockchain-investigator-chainalysis-hit-by-cybersecurity-incident" rel="noopener noreferrer nofollow">Chainalysis initially said on Oct. 30</a> that the intrusion exposed user IDs, names and email addresses but found no evidence that attackers accessed authentication credentials or session tokens.
Another Wednesday update stated an “on-path attack” exposed some customers’ passwords. The company said it had contained and remediated that attack vector and was locking affected accounts and requiring password resets.
Despite the broader exposure, Chainalysis said it still had no evidence that attackers accessed investigation data or manipulated its attribution data.
Related: <a href="https://cointelegraph.com/news/chainalysis-dprk-crypto-cash-out-network-ofac-sanctions" rel="noopener noreferrer nofollow">Chainalysis traces North Korean crypto cash-outs through Garantex</a>

Chainalysis says breach exposed password hashes and live tokens

Cointelegraph

Other articles published on Nov 6, 2026

Join our free newsletter for daily crypto updates!