Chainalysis Restores Data Solutions After All-User Data Exposure

Chainalysis restored Data Solutions by 3 a.m. ET (08:00 UTC) Nov. 10, bringing the product group back online after a cyberattack exposed names, usernames, password hashes and live tokens tied to all users.

The company emailed customers instructions for reconnecting. Organizations must submit trusted IP addresses for allowlisting, and users must reset passwords and rotate API keys where applicable before registering transactions.

Chainalysis had restored Reactor, its Know Your Transaction (KYT) interface and API, and Address Screening at 1:50 p.m. ET (18:50 UTC) Nov. 7, with enhanced security measures. TokenPost covered the return of those three services.

Chainalysis described the incident as a multifront cyberattack in which an outside actor used “offensive agentic techniques” to access its systems and internal tools. The company separately said an “on-path attack” exposed passwords for a subset of customers and that some KYT accounts appeared to have been accessed without authorization. It said it had contained and remediated the on-path attack.

In its Nov. 4 update, Chainalysis said it had found no evidence at that time that investigation data had been accessed or attribution data manipulated.