Chainstack Traces Customer Data Breach to Exposed Admin Tools

TL;DR: Chainstack’s expanded incident report focuses on access-control failures. Its recovery guidance makes completed credential rotation a priority. Chainstack has added technical detail to the security incident it first disclosed on November 3. Its updated report , with a technical section dated November 10, describes an October intrusion built around configuration and access-control failures. The company says it found no evidence that a software vulnerability was exploited. How the access controls failed According to Chainstack, the attacker entered through a development Grafana instance with unchanged default administrator credentials. An unauthenticated tool server with broad Kubernetes permissions then formed part of the access path. Machine credentials also connected the development and production environments. The operational lesson is about the reach of an account after the first login.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to NewsBTC.