Chainalysis Confirms Password Hashes and Live Tokens Exposed in Cyberattack

Blockchain analytics firm Chainalysis has updated its disclosure on a cyberattack, revealing that names, usernames, password hashes, and live tokens for all of its users were exposed to a malicious actor. Initially, the company reported on Oct. 30 that only non-sensitive customer data was accessed. The latest update attributes the password exposure to an 'on-path attack.' Chainalysis has contained the vulnerability, locked affected accounts, and mandated password resets, though it found no evidence that core investigation or attribution data was compromised.