Chainalysis Says Cyberattack Exposed Password Hashes and Tokens

TL;DR Chainalysis says names, usernames, password hashes and live tokens were exposed during its cyberattack, broadening an initial assessment that authentication credentials were unaffected. A separate on-path attack exposed a subset of customer passwords, while abnormal activity led Chainalysis to take KYT, address-screening tools and additional products offline. The company reports no evidence that investigation data was accessed or attribution data manipulated, while password resets and API-key rotation are being required. Chainalysis has expanded the disclosed scope of its October 30 cybersecurity incident, saying customer names, usernames, password hashes and live tokens were exposed to a malicious actor. In its updated security notice , the blockchain analytics firm said the exposure involved information associated with all Chainalysis users, although it did not specify whether every data type affected every account.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Crypto Economy.