Blockchain analytics firm Chainalysis has confirmed that an agentic cyberattack exposed password hashes and live tokens for all of its users, prompting the company to lock affected accounts and take key services offline.
Security incident · Chainalysis
An agentic cyberattack exposed password hashes and live tokens for all Chainalysis users
The company locked impacted accounts and took several key services offline while it works through the scope of the breach and what comes next.
All users
Password hashes exposed, which can be cracked offline, especially for weak passwords.
Live
Session tokens exposed, which can let an attacker act as a logged-in user without the password.
Offline
Several key services taken down, with restoration timing not yet specified.
How the response unfolded
Confirmed steps and the expected next stage
STEP 1
Exposure
Hashes and live tokens exposed
→
STEP 2
Containment
Impacted accounts locked, key services offline
→
STEP 3 · EXPECTED
Credential reset
Forced password resets, sessions revoked, tokens reissued
→
STEP 4 · PENDING
Restoration
Full scope assessment and service timeline
What users should expect
Forced password resets
Active sessions revoked
Access tokens reissued
Official guidance from the company
Still unknown
Number of affected accounts
Entry point used by the attacker
When service access is restored
How automated tools were used, and whether similar methods appear elsewhere
Key takeaway
Credential and session-token security remains a central risk as attackers adopt automation.
Hashes
Can be cracked offline when passwords are weak
Tokens
Allow action as a logged-in user, no password needed
Next
Full scope assessment will determine severity
Continue reading The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.
Already purchased? Sign in ✓ Signed in — this article isn’t included in your current plan.Unlocking the full article...