GoKawiilChainalysis confirms breach exposed credentials and tokens for all customers
Chainalysis has disclosed that a cyberattack on its systems compromised usernames, password hashes and live authentication tokens belonging to every customer, expanding earlier reports that only limited identity metadata was affected. The blockchain analytics firm, whose clients include law enforcement and financial institutions, said attackers used 'offensive agentic' AI techniques and an on-path (man-in-the-middle) attack to intercept the data. In response, Chainalysis took its login portal, Reactor, Data Solutions, KYT tools and address screening products offline and asked customers to supply trusted IP addresses.
GoKawiil's interpretation of the reporting above, not reported fact.
The incident shows how a company built to track cybercriminals and launderers can itself become a target, raising questions about the security of tools relied on by governments and banks worldwide. Chainalysis's shifting disclosures—from 'limited' impact to exposure affecting all users—suggest the investigation is still evolving and could undermine trust in its assurances that investigative data remains untouched. The use of AI-assisted attack techniques, as described by the company, may signal a broader trend of more sophisticated intrusions against security and intelligence vendors.
- Chainalysis says credentials and live tokens for all customers were exposed, not just limited metadata as first reported.
- The breach involved an on-path (MITM) attack and what the company called 'offensive agentic' AI techniques.
- Chainalysis has taken multiple core products offline, including its login portal, Reactor, KYT and address screening tools, while investigating.
YubiKey 5C NFC Security Key — With credential breaches like this Chainalysis incident becoming routine news, hardware-based two-factor authentication is one of the best defenses against stolen passwords and tokens. A YubiKey adds a physical layer of security so that even if your password hash leaks, attackers can't log in without the physical key in hand.
See YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-11-06
Published there as: “Chainalysis says breach exposed credentials for all customers”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.