Chainalysis says hackers obtained data and live tokens for all its users
BREACHChainalysisredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Chainalysis disclosed an October intrusion, similar to other platform hacks that month, in which an external actor used AI agent-assisted offensive techniques to reach internal systems and tools. The company now says password hashes and live tokens were obtained for all users, while its customer email described only user IDs, names, emails and organisation role labels as accessed. No CVE or affected software versions are stated. Defenders with Chainalysis accounts should treat live tokens and password hashes as potentially exposed and watch for further vendor guidance.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Watch for further guidance from Chainalysis on affected accounts and tokens.
- Treat any Chainalysis credentials or tokens linked to your organisation as potentially exposed until the company confirms otherwise.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Ars Technica (Security)