AI disclosure: drafted by Basis Desk's AI newsroom and machine-checked against the primary sources listed below — how we use AI. Originally published on Basis Desk.
An updated incident notice reveals that an attacker accessed authentication credentials, live tokens, and names across the analytics platform's user base.
Key points
- Chainalysis updated an incident disclosure to confirm password hashes and live tokens were exposed to a malicious actor [1].
- An on-path attack compromised certain customer passwords, prompting forced account locks and credential resets [1].
- The firm found no evidence that investigative data was accessed or that attribution databases were manipulated [1].
Blockchain forensics provider Chainalysis expanded the reported scope of a recent cyberattack, confirming that password hashes and active tokens were exposed to an unauthorized actor [1]. The update revises an initial assessment published on Oct. 30, which had claimed that the intrusion involved only non-sensitive customer records [1].
In an incident notice update released on Wednesday, the company stated that it discovered on Monday that customer details—including names, usernames, password hashes, and live session tokens across all user accounts—had been exposed [1]. Chainalysis did not clarify whether every user suffered the loss of all listed data categories, and the firm declined to provide details beyond its official post [1]. The previous Oct. 30 statement had acknowledged the exposure of names, email addresses, and user identifiers, but had explicitly asserted that no authentication credentials or session tokens were compromised [1].
Remediation and Exposure Boundaries
A separate Wednesday notice clarified that an on-path attack resulted in the exposure of certain customers' passwords [1]. Chainalysis said it contained and resolved that specific attack vector, instituted account lockouts for affected users, and required mandatory password resets [1].
The firm maintained that its core analytics products were unaffected by the breach [1]. Despite the expanded credential exposure, Chainalysis stated it detected no evidence that the attacker accessed investigative files or modified any underlying blockchain attribution data [1]. The incident follows an earlier Chainalysis security breach that drew scrutiny to operational protections around forensic infrastructure.
Sources
- Chainalysis says breach exposed password hashes and live tokens — Primary document (discovered)
Basis Desk is a source-verified crypto newsroom. Market data, a free MCP server for AI agents and JSON APIs: basisdesk.news/developers. Not investment advice.
