Chainalysis Confirms User Names, Password Hashes, and Token Information Were Compromised

According to blockchain analytics firm Chainalysis, a malicious actor has obtained certain customer information in this security incident—including the names, usernames, password hashes, and valid authentication tokens of all Chainalysis users. To support the ongoing investigation, access to the Reactor and Data Solutions platforms has been temporarily suspended. As of now, there is no evidence that any investigation-related data has been viewed, nor any indication that Chainalysis’s attribution data has been tampered with. To strengthen defenses, the company has deployed additional proactive monitoring systems to detect anomalous activity; following detection of suspicious activity today, KYT (including its user interface and API), other address-screening products, and the login page were immediately taken offline. Chainalysis is currently reaching out directly to customers whose KYT accounts are suspected to have experienced unauthorized access.