Chainalysis systems breached: User data and passwords stolen

Chainalysis disclosed an October 2026 security incident involving AI-assisted unauthorized system access and credential theft via adversary-in-the-middle techniques.

Initial exposure affected user names, emails, IDs, and roles, though the entry point has since been patched.

What evidence was exposed?

Initially, Chainalysis announced that basic data, such as names, email addresses, user IDs, and user roles on the platform, had been compromised. However, in a subsequent update, the company admitted that the attackers also managed to steal passwords from a group of users. The theft was carried out using a technique where the attackers inserted themselves into digital communication between the parties.

The company said it has now identified and fixed the point of entry for the attackers. It has not yet been confirmed whether the data that was compromised was encrypted in transit.

Which customers use the service?

The breach involves a company with major clients, raising questions about the potential consequences. Chainalysis’ clients include U.S. government agencies such as the FBI, the U.S. Air Force, and Immigration and Customs Enforcement (ICE), as well as large private companies such as Microsoft, Coinbase, and Barclays. It’s unclear at this time whether the data breach exposes these clients to additional risks.

>Stay connected with Hacks.gr

Set us as a preferred source on Google and find us on social media.

Preferred source

↗

end of article

Read the original English article on Hacks.gr