Chainalysis says breach exposed password hashes and live tokens
Chainalysis disclosed password hashes and live tokens were exposed after initially reporting only non-sensitive customer data was accessed.
Chainalysis, a blockchain analytics firm, has reported that a cyberattack exposed not only non-sensitive customer data but also password hashes and live tokens belonging to its users. On Monday, the company disclosed that it had discovered customer information including names, usernames, password hashes, and live tokens being accessed by a malicious actor.
However, Chainalysis did not clarify whether this information pertained to every user and refused to provide additional details beyond its initial disclosure. The company initially reported on October 30 that the breach exposed user IDs, names, and email addresses, but found no evidence of attackers gaining access to authentication credentials or session tokens.
Later that day, another update revealed that an "on-path attack" exposed some customers' passwords. Despite the expanded scope of the breach, Chainalysis stated that it still had no evidence that the attackers accessed its investigation data or manipulated its attribution data.
Written by urgent.news from Cointelegraph's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
