The Morning Dev

Only the news worth knowing

‹
 
  • AAPL 344.17 ▼ 1.53%
  • MSFT 535.93 ▼ 3.58%
  • NVDA 181.60 ▼ 9.26%
  • GOOGL 282.57 ▼ 2.20%
  • AMZN 260.21 ▼ 2.19%
  • META 605.08 ▼ 3.96%
  • TSLA 343.69 ▼ 10.77%
  • AVGO 291.53 ▼ 10.43%
  • TSM 353.10 ▼ 10.78%
  • ORCL 115.16 ▼ 6.93%
  • AMD 404.40 ▼ 17.26%
  • NFLX 65.56 ▼ 1.25%
  • CRM 222.41 ▼ 2.07%
  • ADBE 246.44 ▼ 0.82%
  • INTC 52.25 ▼ 10.33%
  • IBM 247.11 ▼ 2.84%
  • PLTR 154.99 ▼ 9.73%
  • SNOW 269.54 ▼ 7.25%
  • NET 244.51 ▼ 8.28%
  • SAP 243.53 ▲ 1.45%

Security · High impactFan score 45 · Tier B2 sources

Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services

The Hacker News · By info@thehackernews.com (The Hacker News) ·

Blockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic cyber attack targeting its systems also exposed names, usernames, password hashes and live tokens for all users. "While we investigated, we removed access to Reactor and Data…

The Brief

  • Chainalysis said on Wednesday night that some information belonging to all its users was exposed in a cyberattack.
  • Its ongoing investigation found that names, usernames, password hashes and live tokens were also exposed for all users.
  • While investigating, Chainalysis removed access to Reactor and Data services, which forced the shutdown of key services.

Why it matters

If you use Chainalysis services, your account credentials and live tokens may have been exposed, so they should be treated as compromised.

Who’s affected

  • Chainalysis users, including law enforcement and national security customers

What to do

  1. Reset Chainalysis account passwords and revoke any live tokens tied to your account
  • #security
  • #breach
  • #credentials
  • #blockchain
  • #data-exposure

Timeline

  1. Chainalysis discloses that information belonging to all users was exposed in a cyberattack

  2. The Record from Recorded Future News

    Chainalysis warns all users hit in cyber breach involving ‘agentic’ techniques

  3. Investigation reveals names, usernames, password hashes and live tokens exposed; access to Reactor and Data removed

  4. The Hacker News

    Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services

Full coverage · 2 sources

How do you feel about this?

0 Comments

    More in Security

    Security · High impact

    AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI Research

    An unreleased OpenAI cyber model found and exploited 948 distinct Linux kernel privilege escalation bugs for about $1.2 million. The post AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI Research appeared first on SecurityWeek .

    SecurityWeek · Eduard Kovacs · · 3 sources · 💬 353

    Security · High impact

    Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login

    Two flaws in Barracuda's Email Security Gateway, an email-filtering appliance, can be chained to run commands on it as root, its highest level of access, with no login required. The company released patches on Monday, and the security firm watchTowr detailed the attack chain on…

    The Hacker News · info@thehackernews.com (The Hacker News) · · 2 sources