{
  "id": 18350121,
  "title": "October crypto-tracker hack: Access cracked, law enforcement tokens packed",
  "url": "https://urgent.news/2026/11/05/october-crypto-tracker-hack-access-cracked-law-enforcement-tokens-18350121",
  "topic": "world",
  "section": "World",
  "published": "2026-11-05T18:03:00.000Z",
  "source": {
    "name": "The Register",
    "slug": "the-register",
    "url": "https://www.theregister.com/cyber-crime/2026/11/05/october-crypto-tracker-hack-access-cracked-law-enforcement-tokens-packed/5307852"
  },
  "original_language": "en",
  "account": "Blockchain analysis firm Chainalysis confirmed a security breach in October, revealing that hackers gained access to usernames, password hashes, and live tokens. The company first disclosed the intrusion on October 30, with the latest update revealing the extent of the damage. Apart from user IDs, full names, email addresses, and organizational role labels, the attackers also accessed password hashes and live tokens, intensifying the situation for the company. However, it remains unclear which hashing algorithm was used for the users’ passwords, making it challenging to gauge the risk of offline cracking of the hashed credentials. Some users received instructions to change their passwords, and the password reset functionality was down. Users are advised to change their credentials on any site where they reuse passwords. In addition to the data exposure, Chainalysis detected unusual activity on its transaction screening products, leading to the suspension of services while the team addressed critical issues. These services, including the Reactor blockchain investigation platform, Data Solutions threat intelligence platform, and KYT anti-money laundering solution, are currently down. Chainalysis stated that there is no evidence of investigation data being accessed or Chainalysis attribution data being manipulated. The company aims to restore KYT and the risk-intelligence Address Screening tool on Thursday, November 5, with customers needing to provide trusted IP addresses to the support team. Chainalysis is working diligently to strengthen its systems and bring Reactor and Data Solutions back online, requiring users to reset passwords and rotate API keys as needed. While the company has not disclosed the identity of the attackers, it suggested that they utilized AI agents, likening the breach to other tech platform attacks. Chainalysis, a leading blockchain analysis company serving government agencies, cryptocurrency exchanges, financial institutions, and cybersecurity companies, has been instrumental in various cyber-related law enforcement investigations, including the takedown of crypto-laundering network AudiA6 and the LockBit ransomware operation.",
  "summary": "Agentic 'on-path attack' went after Chainalysis's tools, which are routinely called upon to assist police investigations",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}