Chainalysis breach exposes all users' credentials and live tokens; core products taken offline

What happened

Blockchain analytics firm Chainalysis disclosed on November 6, 2026 that an ongoing agentic cyber attack exposed names, usernames, password hashes and live tokens for every one of its users — not a subset, but the entire customer base. According to RedEye Threat Intelligence, which summarized the disclosure on dev.to and drew on reporting from The Hacker News, the company responded by switching off much of its product line: Reactor, Data Solutions, the Know Your Transaction (KYT) interface and API, address screening products, and the login page itself.

For customers whose transaction-screening workflows run through the KYT API, this is not an abstract data exposure but an outage they did not schedule. Every account now requires a password reset and API key rotation.

How the scope grew in under a week

The disclosure marks a sharp widening. Less than a week earlier, Chainalysis had said an external actor used AI-agent-driven offensive techniques to gain unauthorized access to its systems and internal tools, and later described an attack unfolding on multiple fronts, including an on-path component that exposed a subset of customer passwords. The company says that vector has been closed, impacted accounts locked, and monitoring added.

The latest update extends the exposure from a subset of passwords to all users, and adds live tokens to the list. Chainalysis has drawn one firm line: it says it has no evidence that investigations data was accessed or that its attribution data was manipulated. For a firm whose value rests on attribution, that is the sentence customers will read first.

Why live tokens change the math

Password hashes must be cracked before they are useful. Live tokens do not need cracking — a valid token can let someone act as a signed-in user or integration without ever knowing the password. That is why the mandated remediation pairs password resets with API key rotation for every account. There is friction in the meantime: RedEye reports that some password reset emails told recipients that resetting was not possible at that moment, while the company urged anyone who reused their Chainalysis password elsewhere to change it.

Recovery runs through an IP allowlist

Restoration is gated. Chainalysis says it will bring KYT and Address Screening back first, but only for customers who contact support or their account team with trusted IP addresses to be placed on an allowlist. After that, users can reset passwords and rotate API keys to resume registering transactions. Reactor and Data Solutions have no restoration date yet; the company says it is hardening systems continuously and will require additional protections to access accounts.

Part of a wider wave of AI-driven intrusions

Chainalysis has not named the attacker or the tooling used against it, but compared the incident to attacks hitting many other tech platforms in recent weeks. Chainstack, OpenCode, Warp and WorkOS have all disclosed AI-driven attacks, some involving an autonomous penetration testing tool called ARTEX; Chainalysis has not said whether ARTEX was used here.

Microsoft's analysis of the broader campaign, which it assesses has been running since August 2026, describes agents searching public GitHub repositories for exposed secrets, analyzing what they find and launching follow-on attacks with little human involvement. In at least one case, an agent moved from scanning GitHub to exfiltrating data from Azure Key Vault in five minutes. Microsoft says the agent performed service principal sign-ins across dozens of applications in multiple tenants, targeting storage account keys, connection strings, publishing credentials and AKS user credentials before reaching SharePoint, OneDrive and mailbox items, with sign-ins traced to 199.19.77[.]84 and 199.19.77[.]18. The agents showed a repeated appetite for AI service credentials, and Google separately reported a criminal market reselling stolen enterprise model access.

Why it matters

Three lessons stand out. First, a vendor's first scope statement is a floor, not a ceiling: Chainalysis went from a subset of passwords to every user's credentials and live tokens in under a week, so day-one risk decisions should assume growth. Second, agentic tooling compresses attack timelines — Microsoft documented five minutes from public secret to vault exfiltration, breaking incident response assumptions built on days of lateral movement. Non-human identities such as service principals and OAuth applications are now the primary target, which puts machine identity inventory on the leadership risk register rather than an engineering backlog. Third, third-party screening services are operational dependencies: when the KYT API went dark, customers lost the ability to register transactions, and continuity plans need to cover the day a critical vendor deliberately turns itself off.

Caveats remain. The connection to the wider AI-driven campaign rests on Chainalysis's own comparison to other incidents, and the company has not identified the actor, the tooling, or how the on-path attack was positioned. Watch for the promised additional account protections and for any change to its statement that investigations and attribution data were untouched.