Technology
Chainalysis discloses breach exposing customer credentials across its entire user base
Slashdot reports Chainalysis says attackers exposed credentials for all customers but found no evidence of investigative data access.
The short version
- Slashdot reports Chainalysis says attackers exposed usernames, password hashes, and live tokens for all of its customers.[Slashdot]
- Chainalysis says it has no evidence that investigative data or blockchain attribution records were accessed or altered.[Slashdot]
- Chainalysis first described the impact as limited to non-sensitive identity metadata, but later updates revealed broader exposure.[Slashdot]
- Customers must reset passwords and rotate API keys before regaining access, the company says.[Slashdot]
Key facts
- Chainalysis stated that attackers exposed usernames, password hashes, and live tokens for all of its customers.[Slashdot]
- Chainalysis says it has no evidence that investigative data or blockchain attribution records were accessed or altered.[Slashdot]
- Chainalysis initially said the impact was limited to non-sensitive identity metadata, before later updates revealed exposure of usernames and password hashes for all customers.[Slashdot]
What remains uncertain
- The full scope of the exposure is unclear because the company's earlier description of limited impact was revised, and the account rests on the company's own statements.[Slashdot]
- The event is reported by a single outlet, Slashdot, and the claims are not independently verified in the provided reporting.[Slashdot]
Sources
Outlet counts describe coverage, not independent confirmation. Reports may share a wire service or original source.