Blockchain analysis firm Chainalysis confirmed a severe breach where hackers stole sensitive credentials and live tokens for all of its users. The compromised data includes names, usernames, password hashes, and tokens, affecting high-profile clients like the FBI, US Air Force, Microsoft, and Coinbase. The breach occurred in October using AI-assisted offensive techniques.
Initially, Chainalysis downplayed the incident, claiming only "non-sensitive" data like user IDs and email addresses were accessed. However, a later update revealed an "on-path attack" exposed a subset of customer passwords. The company has not clarified if the intercepted data was TLS encrypted or where the infrastructure compromise occurred.
The full extent of potential threats to customers remains unclear.
Source: Ars Technica · Summarized by HeadlinesBriefing