Chainalysis now says its breach exposed password hashes and live tokens for all customers
The blockchain intelligence firm first described the impact as limited to identity metadata, then found broader exposure through an on-path attack.
Evidence: Independent reports. Security stories run only with a named disclosure or independent reporting behind them.
Chainalysis has widened its account of a recent breach. It now says credentials and live tokens for every customer were exposed to a malicious actor, BleepingComputer reports. Last week the company disclosed that attackers using what it called "offensive agentic techniques" had accessed customer names, email addresses, user IDs and organizational role labels. At that point it said the impact was limited to non-sensitive identity metadata. In an update on Wednesday, Chainalysis said: "On Monday, we discovered certain customer information including names, usernames, password hashes and live tokens for all Chainalysis users were exposed to a malicious actor." The company says the credentials were exposed in an on-path attack, commonly called a man-in-the-middle attack. It says it still has no evidence that the attackers accessed investigative graph data or altered its blockchain attribution repositories. SecurityWeek also noted in its weekly roundup that the breach's impact had grown. Chainalysis sells tools for tracing cryptocurrency transactions and investigating fraud, ransomware and money laundering. Its customers include law enforcement agencies, government bodies, financial institutions, insurers and crypto businesses, so exposed live tokens could matter for sensitive investigative accounts.