Chainalysis Discloses Password Hashes and Live Tokens Exposed in Cyberattack

Blockchain analytics firm Chainalysis has widened its public disclosure regarding a recent cyberattack, revealing that password hashes and live tokens were compromised after previously stating that only non-sensitive customer details had been accessed.

In a recent incident notice update, the blockchain analytics company stated that certain user information, including names, usernames, password hashes, and live tokens, was exposed to a malicious actor. This update follows an earlier announcement on October 30, which indicated that the security intrusion had only affected user IDs, names, and email addresses, with no initial indication that authentication credentials or session tokens were involved.

Following the discovery, the firm reported that an on-path attack was responsible for exposing customer passwords. The company noted that it had successfully contained and remediated that specific attack vector, initiated account lockouts, and enforced mandatory password resets for impacted accounts. However, the organization declined to clarify whether every category of exposed data applied to all users and chose not to provide additional details beyond its official statement.

Chainalysis confirmed password hashes and live tokens were exposed following a cyberattack.

Despite the expanded scope of the data exposure, the company affirmed that it has found no evidence indicating that attackers gained access to investigation data or manipulated its internal attribution records.

Why it matters

This wider disclosure highlights the evolving nature of digital security breaches and the challenges firms face in accurately assessing initial data exposure. The incident directly impacts users whose credentials and session tokens were compromised, necessitating immediate security measures such as password resets and account lockdowns by the platform provider.