Chainalysis breach exposed customer credentials and live tokens
Nov 6, 2026 · Summarized by Fundy Tech from 3 sources
Chainalysis says attackers exposed names, usernames, password hashes and live tokens for all users. It has taken key services offline and is asking customers to reset passwords and rotate API keys.
Key points
- Attack exposed data for all Chainalysis users.
- Company shut off Reactor, Data Solutions, KYT and the login portal.
- No evidence yet of accessed investigations data or altered attribution data.
Why it matters
If your business uses Chainalysis, access may be disrupted while the company locks down accounts. You should treat passwords and API keys as exposed and change them where needed. For any reused credentials, update those on other systems too. This is a reminder to keep separate passwords and to plan for service interruptions when security incidents hit vendors.
Who’s affected: Chainalysis customers and their account credentials
What to do
- Reset any reused passwords on other systems.
- Follow Chainalysis instructions for trusted IP allowlisting.
- Rotate API keys when access returns.
- Monitor vendor notices before signing back in.
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.