Chainalysis Says Customer Data Was Exposed, Suspends Several Services

Chainalysis said some information tied to every user was exposed to a malicious actor, prompting the company to suspend access to several compliance and screening services during its investigation.

The exposed information included names, usernames, password hashes and active tokens. Chainalysis said it had found no evidence that data from investigations had been accessed or that its attribution data had been manipulated.

The company blocked access to Reactor and Data Solutions during the investigation. After detecting unusual activity, it also took its KYT interface and API, other address-screening products and its login page offline. Chainalysis directly notified customers whose KYT accounts it suspected had been accessed without authorization.

The company planned to begin restoring KYT and address-screening access on Nov. 7, while requiring users to reset passwords and replace API keys. Work to restore Reactor and Data Solutions was continuing.

The outage affects compliance transaction-monitoring products that Chainalysis considers important to customer businesses.