Chainalysis Reveals Larger Data Breach Impact in Cyberattack

The blockchain analysis firm revealed that on Monday they found that a malicious actor had accessed specific customer details, including full names, usernames, password hashes, and active tokens associated with every Chainalysis user.

Chainalysis chose not to clarify if each type of data was exposed for all users and declined to share further details with Cointelegraph beyond the official update.

Previously, on October 30, Chainalysis reported that the breach involved exposure of user IDs, names, and email addresses, with no indication that authentication credentials or session tokens were compromised.

A subsequent update on Wednesday noted that an 'on-path' attack led to the exposure of some customers’ passwords. The company stated it contained the attack vector, secured affected accounts, and is mandating password changes.

Despite the increased scope of the breach, Chainalysis has found no evidence that attackers accessed their investigation files or tampered with attribution data.

Chainalysis’ expanded disclosure highlights the importance of scrutinizing cybersecurity incidents beyond initial assessments, emphasizing vigilance in protecting sensitive and authentication information.