October crypto-tracker hack: Access cracked, law enforcement tokens packed

Chainalysis says attackers who broke into its systems in October accessed usernames, password hashes and live tokens, adding to previously disclosed exposure of users’ names, email addresses and organisational roles. The breach has also disrupted several services used by customers, including law enforcement agencies, making the incident significant for investigations and other work that relies on the company’s blockchain analysis tools.

The company detected the intrusion on 30 October and has taken parts of its Reactor, Data Solutions and KYT services offline while it investigates and strengthens security. Chainalysis says it has no evidence that investigation data was accessed or its attribution data altered. It plans to restore some services with access restricted to trusted IP addresses; customers will need to reset passwords, and API keys may also need to be rotated. The company has not identified the attackers, though it has described their methods as agentic and the incident as an attacker-in-the-middle attack.