Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services

Summary

Blockchain analysis firm Chainalysis disclosed that an agentic cyber attack on its systems also exposed names, usernames, password hashes and live tokens for all users. The company removed access to Reactor and Data Solutions, took its Know Your Transaction (KYT) interface and API offline, and locked impacted accounts.

Mitigation

Chainalysis says the attack vector has since been addressed and it has implemented additional proactive monitoring systems. Customers should contact support@chainalysis.com or their account team with trusted IP addresses for allowlisting, then reset passwords and rotate API keys. Users should also reset passwords on other systems where they reuse credentials.

Related items

• InfoOpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the LineSimilar attack · SecurityWeek
• MediumMalicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' ComputersSimilar attack · The Hacker News
• LowRailway’s AI agents go off the track on a rival’s networkSimilar attack · CSO Online
• MediumOpenAI Model Wrote Its Own Network Code to Get Around Sandbox RestrictionsSimilar attack · SecurityWeek
• MediumThreat actors use agentic AI tooling to find and abuse exposed secretsSimilar attack · Microsoft Security Blog