Chainalysis Breach Exposes User Names, Hashed Passwords and Active Tokens

WHO:

TechRadar - Chainalysis and all of its users were affected by the breach.

Cointelegraph - Chainalysis disclosed that password hashes and live tokens were exposed.

Ars Technica - Chainalysis said hackers stole credentials and tokens for all of its customers.

WHAT:

TechRadar - The breach exposed user names, usernames, password hashes, and active tokens.

TechRadar - Chainalysis shut down multiple services to contain the attack and required all users to change their passwords.

Cointelegraph - Chainalysis initially reported that only non-sensitive customer data had been accessed, then disclosed that password hashes and live tokens were exposed.

Ars Technica - Chainalysis described the incident as a “multifront cyberattack.”

HOW:

Ars Technica - Chainalysis said the attack involved AI agents and an on-path data snatch.

(UPDATED November 6, 2026 23:01 UTC)

Chainalysis disclosed that hackers exposed customer credentials, password hashes, and active tokens. The company shut down multiple services to contain the breach and required users to reset passwords. Chainalysis described a multifront cyberattack involving AI agents and an on-path data theft.