Last week Chainalysis said attackers using “offensive agentic techniques” got customer names and emails (our post). Now it says the breach exposed usernames, password hashes and live tokens for all customers, The Hacker News and BleepingComputer report.
What’s offline
The login portal, Reactor, Data Solutions, the KYT interface and API, and address screening products. Everyone will have to reset their password and rotate API keys before getting back in. Chainalysis says it has no evidence investigations data or attribution records were touched.
My take
Its customers include law enforcement and banks. If you reused that password anywhere, change it there now, and rotate any Chainalysis API keys sitting in your scripts.
God Bless, and Happy hacking!
