Chainalysis Says Breach Exposed Password Hashes and Live Tokens

Chainalysis disclosed that a cyberattack exposed customer information including password hashes and live tokens, broadening its initial account of the incident. According to Cointelegraph, the blockchain analytics firm said in an update to its incident notice that it discovered on Monday that names, usernames, password hashes and live tokens for all Chainalysis users had been exposed to a malicious actor. The company did not clarify whether every listed type of information was exposed for each user, and declined to provide Cointelegraph with details beyond its published disclosure. Chainalysis initially said on Oct. 30 that the intrusion exposed user IDs, names and email addresses, but that it had found no evidence attackers accessed authentication credentials or session tokens. A separate Wednesday update said an “on-path attack” exposed some customers’ passwords. Chainalysis said it had contained and remediated that attack vector, and was locking affected accounts and requiring password resets. Despite the expanded disclosure, the company said it had no evidence attackers accessed investigation data or manipulated its attribution data.