{
  "id": 18586545,
  "title": "Chainalysis Says Breach Exposed Credentials For All Customers",
  "url": "https://urgent.news/2026/11/06/chainalysis-says-breach-exposed-credentials-for-all-customers",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-06T23:00:00.000Z",
  "source": {
    "name": "Slashdot",
    "slug": "slashdot",
    "url": "https://it.slashdot.org/story/26/11/06/2156257/chainalysis-says-breach-exposed-credentials-for-all-customers"
  },
  "original_language": "en",
  "account": "Chainalysis revealed that attackers obtained usernames, hashed passwords, and live tokens for every customer. Responding to the initial compromise, the company prompted users to alter their passwords and then suspended the login portal along with Reactor, Data Solutions, the KYT user interface and API, and address screening features following the discovery of additional suspicious behavior. Although the firm maintains no proof that investigative data or blockchain attribution records were accessed or modified, all users will be compelled to reset passwords and swap API keys before reaccessing. Chainalysis offers blockchain analysis tools to assess cryptocurrency transactions and probe crimes like fraud, ransomware, and money laundering, serving a global clientele comprising law enforcement, government entities, financial institutions, insurers, and crypto businesses. Last Friday, the company disclosed that malicious actors exploited AI tools to obtain customers' names, emails, user IDs, and organizational role tags via what Chainalysis termed \"offensive agentic techniques.\" Although the breach was initially deemed limited, affecting only non-sensitive identity metadata, subsequent updates disclosed that usernames and password hashes for all customers were exposed in an \"on-path attack,\" also referred to as a Man-in-the-Middle attack. Nevertheless, Chainalysis has not found any evidence that the attackers tampered with investigative graph data or tampered with its blockchain attribution repositories. To preclude threat actors from accessing compromised accounts, Chainalysis solicited customers to supply trusted IP addresses to regain entry to the login portal and reset credentials once the service is reactivated.",
  "summary": "Chainalysis says attackers exposed usernames, password hashes and live tokens for all of its customers. \"While the company locked Chainalysis accounts as a precaution after discovering that some customers' passwords had been exposed and asked users to reset their passwords before signing in again, it has now taken the login portal offline, together with Reactor and Data Solutions, the…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "Dev.to",
        "title": "The Chainalysis Breach: From \"No Credentials Accessed\" to \"All Users Exposed\" in Five Days",
        "url": "https://urgent.news/2026/11/06/the-chainalysis-breach-from-no-credentials-accessed-to-all-users",
        "published": "2026-11-06T10:06:20.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}