Chainalysis says attackers exposed names, password hashes, and live tokens for every customer

Blockchain analytics company Chainalysis disclosed that a multifront intrusion, which it says included AI-agent-assisted access, exposed names, usernames, password hashes, and live authentication tokens belonging to every one of its customers. A live token is an active credential that can let someone into an account without needing a password, so exposed tokens are especially risky until revoked. Ars Technica reports that the affected customer list includes the FBI, U.S. Immigration and Customs Enforcement, the U.S. Air Force, Microsoft, Coinbase, and Barclays. In an update posted at 3:30 a.m. EST on November 6, Chainalysis said it had begun a phased restoration of two of its products, KYT and Address Screening, while two other products, Reactor and Data Solutions, remained offline as the company worked through the incident.

Why it matters

A breach touching federal law enforcement agencies and major banks shows how much damage a single intrusion at a widely used analytics vendor can cause across government and finance.

Source: Ars Technica