Chainalysis: Some customer information of all users found exposed; multiple services taken offline during investigation

November 6 — Chainalysis released a security incident update: the company discovered on Monday that certain customer information of all Chainalysis users (including names, usernames, password hashes and active tokens) had been exposed to malicious actors. During the investigation, Chainalysis removed access to Reactor and Data Solutions. There is still no evidence that investigation data was accessed or that Chainalysis attribution data was manipulated.

Given the importance of compliance transaction monitoring products to customer businesses, Chainalysis increased proactive monitoring of abnormal activity. After detecting abnormal activity today, it took KYT (user interface and API), other address screening products and the login page offline, and directly notified customers whose KYT accounts were suspected of unauthorized access. Chainalysis plans to begin restoring access to KYT and address screening starting tomorrow, and will require users to reset their passwords and rotate API keys, while continuing to remediate systems to restore Reactor and Data Solutions.