News · Security & Hacks
An updated incident notice reveals that an attacker accessed authentication credentials, live tokens, and names across the analytics platform's user base.
Key point 1 of 3
01
Chainalysis updated an incident disclosure to confirm password hashes and live tokens were exposed to a malicious actor .
Key point 2 of 3
02
An on-path attack compromised certain customer passwords, prompting forced account locks and credential resets .
Key point 3 of 3
03
The firm found no evidence that investigative data was accessed or that attribution databases were manipulated .
Context
Chainalysis initially stated on Oct. 30 that an intrusion exposed only non-sensitive identifiers and emails without compromising authentication credentials .
Why it matters
All Chainalysis users faced credential exposure, requiring mandatory password resets and account locks for accounts hit by the on-path attack .
What to watch
Confirmation from Chainalysis on whether live tokens were exploited or if additional customer segments experienced deeper compromise .
Sources
Built from 1 primary source, machine-checked before publication.
Keep reading
Read the full story
AI-generated, source-verified. Sources, citations and live prices on the article page.