Chainalysis Confirms Breach Exposed User Credentials and Passwords

Chainalysis confirmed a security breach that exposed user credentials, including password data and authentication tokens, and is requiring all users to reset passwords to protect account access.

The exposed information included users’ names and usernames, password hashes and valid authentication tokens. Some plaintext passwords were also leaked. An Oct. 30 alert flagged abnormal activity without confirming the breach’s full scope; a Nov. 6 update disclosed additional details.

Chainalysis is also requiring API key rotation where necessary. It suspended its Know Your Transaction (KYT) monitoring and address-screening services as a precaution.

Chainalysis is a leading blockchain analytics firm serving businesses and government agencies. Its products provide cryptocurrency transaction insights and compliance support, helping organizations understand blockchain activity and combat illicit transactions. The suspended monitoring and address-screening services are part of that work. The breach raises immediate account-security concerns and affects the firm’s user credentials and customer services.