Chainalysis Takes Services Offline After Customer Data Exposure

Chainalysis took several products offline after detecting suspicious activity during its investigation into exposed customer data, disrupting customers' access to compliance monitoring and address-screening tools.

Chainalysis said some customer information tied to all users had been exposed to malicious actors. The details included names, usernames, password hashes and active tokens. It said it had found no evidence that investigative data was accessed or its attribution data manipulated.

The company had already removed access to Reactor and Data Solutions during the inquiry. After increasing active monitoring because customers use its products for compliance transaction monitoring, it detected further suspicious activity and disabled KYT's user interface and API, other address-screening products and login pages. It directly notified customers whose KYT accounts it suspected had been accessed without authorization.

Chainalysis planned to start restoring KYT and address-screening access Saturday, Nov. 7, and required users to reset passwords and rotate API keys. The company continued repairs needed to bring Reactor and Data Solutions back online.