Chainalysis reports security breach resulting in data theft of customer information
Blockchain analysis firm Chainalysis confirmed that unauthorized actors gained access to its network, compromising personal data and credentials belonging to its entire user base.
Blockchain data platform Chainalysis has disclosed a significant security breach occurring in October, involving the unauthorized extraction of user information. The firm confirmed that hackers obtained names, email addresses, usernames, password hashes, and active authentication tokens for its entire user base.
The incident involved the use of AI-assisted offensive techniques to bypass existing network security. Although the company initially characterized the exposed data as "non-sensitive," the inclusion of password hashes and live tokens poses a notable risk to the platform's clients, who include federal agencies such as the FBI and the US Air Force, as well as financial institutions and technology firms.
Chainalysis has initiated an investigation into the scope of the breach to determine if the stolen data led to further unauthorized access within client systems. The company currently faces scrutiny regarding the impact of the exposure and the security protocols that failed to prevent the unauthorized entry.