Chainalysis Breach Exposes Password Hashes, Usernames, Live Tokens and Personal Data of All Customers

Blockchain analysis firm Chainalysis has confirmed that a cyberattack resulted in the exposure of password hashes, usernames, live tokens, and personal information including names and email addresses belonging to every customer. The company initially reported the incident on 30 October 2026, stating at the time that there were no indications attackers had accessed credentials or investigative data. Chainalysis, which provides blockchain analytics primarily to law enforcement agencies investigating cryptocurrency theft and fraud, later disclosed that the attackers had in fact obtained data from all customer accounts. As a direct result, the firm has reset passwords for every user and is notifying those whose Know-Your-Transaction (KYT) accounts were specifically compromised. KYT is Chainalysis' service that enables businesses to monitor cryptocurrency transactions for compliance and risk purposes. The affected services remain offline while the company continues remediation efforts, and the exact method used to compromise the systems has not been disclosed.

Security.NLNovember 5, 2026Translated from NL

Read at source

Chainalysis, a blockchain analysis company that assists law enforcement and regulatory bodies with investigations into cryptocurrency theft and fraud, has disclosed a significant data breach affecting all of its customers.

The firm announced on 30 October 2026 that it had suffered a cyberattack. At that stage, Chainalysis stated there were no indications that attackers had accessed credentials, investigations or tokens, although several customer-facing services were taken offline as a precaution.

Yesterday evening the company updated its disclosure, confirming that the attackers had obtained names, usernames, password hashes and live tokens belonging to every customer. In response, Chainalysis has reset passwords across its entire customer base.

Customers are currently unable to set new passwords because the affected services remain offline. The company has also stated it will separately notify users whose Know-Your-Transaction (KYT) accounts were compromised. KYT is the service that allows businesses to monitor cryptocurrency transactions for compliance and illicit activity detection.

The precise attack vector has not been revealed. Chainalysis says it is continuing to secure its systems, but no timeline has been provided for when the offline services will be restored.

Chainalysis KYT

ShareX Facebook LinkedIn Reddit

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in Breaches & Leaks

Breaches & Leaks

DreamHost Discloses Theft of Webmail and FTP Passwords in Targeted Attack on File Manager Tool

DreamHost has confirmed that a targeted attack on its File Manager service resulted in the theft of FTP, SFTP, and webmail credentials belonging to a subset of customers. The breach occurred between August and 23 October 2026 after attackers exploited a vulnerability in the browser-based File Manager, which relies on third-party software. The company reset affected passwords and terminated active webmail sessions on the same day the incident was discovered. In a small number of cases, the stolen credentials were used to access mailbox contents, prompting individual notifications to those customers. Less than 10 percent of all mail and FTP/SFTP accounts hosted by DreamHost were impacted. The provider has stated it will strengthen security measures to prevent similar incidents and filed a data breach notification with the California Attorney General.

Security.NLNov 5, 2026Translated from NL

Breaches & Leaks

Digital Arts Discovers Unauthorized Access to Cloud Services via AI-Powered Audit Dating Back to July 2025

Digital Arts announced on October 21 that it had detected unauthorized access to its cloud service operation environment and internal systems. The company performed an AI-driven comprehensive inspection on October 9 that revealed traces of intrusion missed by previous checks, with the earliest evidence pointing to July 2025. Attackers had obtained credentials used for cloud operations and leveraged them to enter the environment. Several cloud services faced potential exposure of customer information, although no data exfiltration or secondary incidents have been confirmed. Digital Arts has invalidated the compromised credentials, required password changes across all affected customers, and implemented additional remediation steps while continuing enhanced monitoring.

ScanNetSecurityNov 2, 2026Translated from Japanese

Breaches & Leaks

Chimeraz Claims Data Leaks Targeting French Political Parties Renaissance, La France Insoumise and PCF

Cybercriminal Chimeraz has announced possession of data associated with three major French political parties: Renaissance, La France Insoumise, and the Parti Communiste Français. The claims include millions of records described as voter outreach and door-to-door campaign files, with some data offered for free and other portions listed for sale. Two datasets attributed to Renaissance and La France Insoumise share nearly identical file naming patterns, raising questions about possible shared origins or export methods without confirming a common source. The announcements detail specific line counts, unique entries, addresses, phone numbers, and email addresses, though these figures remain unverified seller claims. The incident highlights risks of targeted fraud or impersonation using political context, while underscoring that addresses alone do not prove political affiliation. Similar leaks involving La France Insoumise and Rassemblement National appeared online in July 2026.

ZATAZNov 2, 2026Translated from French