Chainalysis: Password Hashes Exposed

Chainalysis, a blockchain analytics firm, revealed that a cyberattack exposed more sensitive information than initially reported, including password hashes and live tokens for its users.

The company initially stated on October 30 that the intrusion only exposed user IDs, names, and email addresses, with no evidence of attackers accessing authentication credentials or session tokens.

However, a subsequent update disclosed that an 'on-path attack' exposed some customers' passwords, prompting the company to lock affected accounts and require password resets.

Chainalysis maintains that it has no evidence that attackers accessed investigation data or manipulated its attribution data, despite the broader exposure.

The company has contained and remediated the attack vector, but the incident may still pose risks to its users and the broader crypto market.