Chainalysis says hackers stole credentials and tokens for all of its customers

What happened

Chainalysis said hackers broke into its network in October. The company said the attackers used AI-assisted tools to get into its systems and internal tools. Later, Chainalysis said some customer passwords were exposed through an 'on-path attack,' and that the weak spot had been fixed.

Key facts

• The breach may affect all Chainalysis users.
• Stolen data may include names, usernames, password hashes, and live tokens.
• Known customers include the FBI, US Immigration and Customs Enforcement, the US Air Force, Microsoft, Coinbase, and Barclays.
• Chainalysis called some exposed data, such as user IDs and email addresses, 'non-sensitive.'

What is an on-path attack?

An on-path attack is also called a man-in-the-middle attack. A hacker gets into a device or system that passes messages between two people or systems. The hacker can then see or change the data moving between them.

Why it matters

Live tokens can let someone act as a user without needing a password. Government agencies and large companies use Chainalysis, so the risk could reach many organizations. It is still unclear whether the stolen data has led to new attacks.

What to watch

• Whether Chainalysis says where the attack on its infrastructure happened.
• Whether the stolen data was protected by TLS encryption.
• Whether customers report misuse of their accounts or tokens.
• Further updates from Chainalysis on the 'ongoing multifront cyberattack.'