🔐Chainalysis Breach Exposes Personal Data of All Customers Including Government Agencies

Reset your Chainalysis credentials before you log back in

Chainalysis got hit, and the attackers walked away with personal data for every single customer. Names, usernames, password hashes, and live tokens are all in play. If you use Chainalysis for crypto compliance or investigations, treat your credentials as burned. The breach also used AI agent-assisted offensive techniques to get into internal systems and tools. That's the part worth paying attention to. Chainalysis hasn't shared any details on how those agents worked, which means defenders everywhere are flying blind on this attack pattern. The company removed access to its Reactor and Data Solutions services and is slowly bringing back KYT and Address Screening. Customers have to reset credentials before they get back in. The company says it found an on-path attack that exposed a subset of customer passwords, and that the vector is now fixed. The source is still unknown. Chainalysis also reported that user IDs, email addresses, and organization role labels were accessed, which it calls non-sensitive. Chainalysis found the exposure two days before disclosing it on Wednesday. It has not found evidence that investigation data was accessed or attribution data was manipulated. Whether the stolen traffic is useful to attackers depends on whether they could decrypt it, and that's still unclear.