Chainalysis confirmed that user names, password hashes, and token information were leaked

Blockchain analysis company Chainalysis stated that it has confirmed that certain customer information, including the names, usernames, password hashes, and valid tokens of all Chainalysis users, was exposed to a malicious actor during this security incident. During the investigation, access to Reactor and Data Solutions was cut off by the officials. There is currently no evidence that any investigative data was accessed or that Chainalysis's attribution data was tampered with.

It is reported that the officials implemented additional proactive monitoring systems to detect abnormal activities. After abnormal activities were discovered today, the KYT (User Interface and API) and other address screening products and login pages were taken offline. Customers whose KYT accounts appear to have been accessed without authorization are being directly notified.

Chainalysis plans to restore access to KYT and address screening starting tomorrow. Customers can send trusted IP addresses to support@chainalysis.com or contact the Chainalysis customer team to be whitelisted. Subsequently, Chainalysis will authorize users to reset passwords and rotate API keys for transaction logging.