Reporting · technology
Chainalysis restores screening tools in phases after cyberattack
A cyberattack has exposed names, usernames and password hashes at Chainalysis, according to a November update, as the firm brings back its KYT and address screening tools in stages.
Quick take
- Chainalysis is restoring its KYT and address screening services in phases after several days of restrictions.
- A November 4 update said names, usernames and password hashes were exposed, reversing an earlier finding of no sensitive access.
- Customers are urged to allowlist trusted IP addresses and prepare password resets and API key rotation.
NewsBTC reported that Chainalysis is bringing back its KYT and address screening services in phases, after several days of service restrictions. The company disclosed a cyberattack, and an updated security notice dated November 6 describes the incident.
An October 30 statement from the company said it had found no evidence of sensitive access. That position shifted in a November 4 update, which stated that names, usernames and password hashes were exposed, and that live tokens were also exposed to the attacker.
Abnormal activity led the company to take more products offline, and customers have been told to allowlist trusted IP addresses. Customers have additionally been asked to get ready for password resets and rotation of API keys. The notice indicates there is no evidence that investigation content was accessed or that attribution was manipulated.
Full restoration of every product has not been confirmed. Open questions include the scope of the exposure, the remedial actions, and the timetable for Reactor.
Sources
Machine-written from the publishers’ reports and checked against them · How Dextape writes
Mentioned in this story
CoinGecko last prints. Not a Dextape quote.
