Chainalysis reveals network breach exposed credentials and tokens across entire customer base

Blockchain intelligence company Chainalysis announced that a cyberattack exposed sensitive personal data, including names, usernames, password hashes, and live tokens, for all of its users. The intrusion, which began in October 2026, was initially reported as a limited incident before later discoveries showed that credentials and tokens across its entire customer base were compromised. Chainalysis serves high-profile clients ranging from government agencies like the FBI, US Immigration and Customs Enforcement, and the US Air Force to corporate clients such as Microsoft, Coinbase, and Barclays. [1][2][3]

The company stated that attackers deployed AI agent-assisted offensive techniques and executed an on-path attack to breach internal systems and tools. Chainalysis took its login portal offline, along with key products including Reactor, Data Solutions, Chain (Beta), Address Screening, and its Know-Your-Transaction user interface and API, after detecting abnormal activity. Although the firm found no evidence that investigative graphs, case notes, or attribution records were manipulated or accessed, it is forcing all users to reset passwords, rotate API keys, and submit trusted IP addresses to regain platform access. [1][2][3]