Chainalysis says hackers stole credentials and tokens for all of its customers

Blockchain analysis firm Chainalysis has been targeted in a multifront cyberattack that resulted in hackers obtaining sensitive personal information, including names, usernames, password hashes, and live tokens, for all of its users. The attack, which used AI agent-assisted techniques and an on-path data snatch, has compromised the security of Chainalysis's high-profile customers, including government agencies and private companies such as Microsoft, Coinbase, and Barclays. The company has confirmed that the attackers accessed non-sensitive customer data, including user IDs, full names, email addresses, and organization role labels, and has since identified and fixed the attack vector used in the on-path attack. A further investigation revealed that customer information, including names, usernames, password hashes, and live tokens, were exposed to malicious actors, although it is unclear if the data was encrypted or not.