Chainalysis: Confirmed that all user names, usernames, password hashes, and valid token information have been compromised.

November 6 - Blockchain analytics firm Chainalysis stated that it has confirmed that in this security incident, certain customer information including names, usernames, password hashes, and valid tokens of all Chainalysis users was exposed to a malicious actor (hacker). During the investigation, access to Reactor and Data Solutions was cut off. There is still no evidence that any investigation data was accessed or that Chainalysis's attribution data was tampered with.

It is reported that additional proactive monitoring systems have been implemented to detect anomalous activity. After discovering anomalous activity today, KYT (user interface and API) and other address screening products and login pages were taken offline. Customers whose KYT accounts appear to have been accessed without authorization are being notified directly.

Chainalysis plans to restore access to KYT and Address Screening starting tomorrow. Customers can send trusted IP addresses to support@chainalysis.com or contact the Chainalysis customer team to be whitelisted. Subsequently, Chainalysis will authorize users to reset passwords and rotate API keys in order to log transactions.