Chainalysis Breach Widens to All Users: Credentials and Live Tokens Exposed in Agentic Attack
TL;DR what: Chainalysis disclosed that an ongoing agentic cyber attack exposed names, usernames, password hashes and live tokens for all of its users. impact: Reactor, Data Solutions, the KYT interface and API, address screening products and the login page were taken offline, and every account now needs a password reset and API key rotation. fix: Chainalysis says it has addressed the on-path…
Chainalysis announced that a recent agentic cyber attack compromised all user credentials and live tokens in its systems. This breach affected Reactor, Data Solutions, the KYT interface and API, address screening products, and the login page. All accounts now require password resets and API key rotations. Chainalysis has addressed the on-path attack vector and added monitoring, but restoration of KYT and Address Screening will only be available for customers who register trusted IP addresses before resetting passwords and rotating API keys.
The breach impacts every Chainalysis customer, especially those relying on the KYT API, and anyone who reused a Chainalysis password on other systems. Chainalysis sells blockchain analysis services and had to trace the breach through its own systems. The attack vector was found to be similar to recent AI-driven intrusions affecting other tech platforms.
Chainalysis has not disclosed the attacker's identity or the specific tools used, but emphasized the need for immediate action.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
