{
  "id": 18459829,
  "title": "Chainalysis says breach exposed password hashes and live tokens",
  "url": "https://urgent.news/2026/11/06/chainalysis-says-breach-exposed-password-hashes-and-live-tokens",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-06T06:54:34.000Z",
  "source": {
    "name": "Cointelegraph",
    "slug": "cointelegraph",
    "url": "https://cointelegraph.com/news/chainalysis-cyberattack-password-hashes-live-tokens-exposed"
  },
  "original_language": "en",
  "account": "Chainalysis, a blockchain analytics firm, has reported that a cyberattack exposed not only non-sensitive customer data but also password hashes and live tokens belonging to its users. On Monday, the company disclosed that it had discovered customer information including names, usernames, password hashes, and live tokens being accessed by a malicious actor. However, Chainalysis did not clarify whether this information pertained to every user and refused to provide additional details beyond its initial disclosure. The company initially reported on October 30 that the breach exposed user IDs, names, and email addresses, but found no evidence of attackers gaining access to authentication credentials or session tokens. Later that day, another update revealed that an \"on-path attack\" exposed some customers' passwords. Despite the expanded scope of the breach, Chainalysis stated that it still had no evidence that the attackers accessed its investigation data or manipulated its attribution data.",
  "summary": "Chainalysis disclosed password hashes and live tokens were exposed after initially reporting only non-sensitive customer data was accessed.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}