Chainalysis Confirms All Users’ Password Hashes and…
By Karthik Subramanian
AI summary of the source article
Chainalysis confirmed a cyberattack exposed names, usernames, password hashes, and valid authentication tokens for all users. The incident disrupted critical compliance services, including the Know Your Transaction platform and Reactor, prompting temporary shutdowns and mandatory credential resets.
Why it matters
The incident highlights the security risks facing cryptocurrency compliance providers, whose systems contain sensitive information and support financial crime detection across multiple organizations. Service interruptions may also complicate automated transaction screening for institutions relying on Chainalysis infrastructure.
Key facts
- Attackers accessed names, usernames, password hashes, and valid authentication tokens associated with all Chainalysis users.
- Services including the Reactor investigation platform, Data Solutions, and the Know Your Transaction platform were temporarily taken offline.
- Investigators found no evidence that confidential investigation records were accessed or that blockchain attribution data was manipulated.
Source excerpt · FinanceFeeds
Blockchain analytics company Chainalysis has confirmed that names, usernames, password hashes and valid authentication tokens associated with all its users were exposed during a cyberattack, significantly expanding the scope of its previously disclosed security incident. In an update published late November 4, 2026, the company acknowledged that attackers had accessed sensitive authentication info…