GoKawiilChainalysis Confirms Breach Exposed Login Credentials for All Customers
Chainalysis disclosed that a breach exposed usernames, password hashes and live authentication tokens for every customer, prompting it to take its login portal, Reactor, Data Solutions, KYT tools and address screening products offline. The company says it found no evidence that investigative graph data or blockchain attribution records were accessed or altered, but is requiring all users to reset passwords and rotate API keys before regaining access.
GoKawiil's interpretation of the reporting above, not reported fact.
The incident began as a narrower disclosure about exposed names and emails but has escalated to credentials for the entire customer base, suggesting the initial assessment understated the breach's scope. Because Chainalysis serves law enforcement, governments and financial institutions, compromised credentials could expose sensitive investigative workflows even if attribution data itself remains untouched. The company's request for trusted IP addresses before restoring access indicates it is trying to prevent attackers from reusing stolen logins once systems come back online.
- Attackers obtained usernames, password hashes and live tokens for all Chainalysis customers via an on-path (MITM) attack.
- Chainalysis took its login portal, Reactor, Data Solutions, KYT and address screening tools offline after detecting further abnormal activity.
- No evidence yet that investigative or blockchain attribution data was accessed, but all customers must reset passwords and rotate API keys.
YubiKey 5 NFC Security Key — With credential breaches like this one exposing passwords and tokens, hardware-based two-factor authentication is one of the strongest defenses available. A YubiKey lets you secure accounts with phishing-resistant authentication, so even if your password is compromised, attackers can't log in without the physical key.”,
See YubiKey 5 NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: it.slashdot.org, 2026-11-06
Published there as: “Chainalysis Says Breach Exposed Credentials For All Customers”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.