GoKawiilChainalysis confirms breach exposed credentials and tokens for all customers
Blockchain analysis firm Chainalysis disclosed that hackers accessed names, usernames, password hashes and active authentication tokens belonging to its entire customer base. The company said the October intrusion used AI-assisted offensive techniques and included an 'on-path' attack that intercepted traffic to capture some customer passwords, a flaw it says has since been fixed.
GoKawiil's interpretation of the reporting above, not reported fact.
Chainalysis counts government agencies like the FBI and US Air Force, plus firms such as Microsoft and Coinbase, among its clients, so stolen credentials or tokens could let attackers impersonate or access sensitive accounts tied to law enforcement and financial investigations. The company has not clarified whether intercepted data was encrypted or detailed where the infrastructure compromise occurred, leaving the scope of potential downstream risk uncertain.
- All Chainalysis customers had credentials, password hashes and live tokens exposed in the breach.
- Attackers reportedly used AI-assisted techniques and an on-path attack to intercept traffic and steal passwords.
- High-profile clients including the FBI, US Air Force, Microsoft and Coinbase could be affected, though full impact remains unclear.
YubiKey 5C NFC Security Key — With breaches like this exposing credentials and tokens, hardware-based two-factor authentication is one of the best defenses against account takeover even if passwords leak. The YubiKey 5C NFC lets you add a physical security layer to accounts for services like Coinbase, Microsoft, and other platforms mentioned in the breach. It's a simple, durable way to make stolen credentials far less useful to attackers.
See YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: arstechnica.com, 2026-11-06
Published there as: “Chainalysis says hackers stole credentials and tokens for all of its customers”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.