Chainalysis breach widens from IDs to passwords and live tokens 🔐

Blockchain analytics firm Chainalysis disclosed Wednesday that a cyberattack exposed names, usernames, password hashes and live tokens for all Chainalysis users to a malicious actor. The company did not disclose whether every category of information was exposed for every user and declined to provide Cointelegraph with additional information beyond its published update.

“On Monday, we discovered certain customer information including names, usernames, password hashes and live tokens for all Chainalysis users were exposed to a malicious actor,” Chainalysis said in an update to its incident notice. The disclosure expands on the firm’s initial Oct. 30 report, which said the intrusion exposed user IDs, names and email addresses but found no evidence that attackers accessed authentication credentials or session tokens.

Another Wednesday update identified an “on-path attack” that exposed some customers’ passwords. Chainalysis said it contained and remediated that attack vector, locked affected accounts and required password resets.

Despite the broader exposure, Chainalysis said it still had no evidence that attackers accessed investigation data or manipulated its attribution data.