Chainalysis, a company that provides crypto transaction monitoring tools to banks and financial institutions, disclosed late Wednesday that some of its customers' accounts appear to have been accessed without authorization. The breach exposed password hashes and live tokens for all users, raising concerns about the security of sensitive financial data. Chainalysis first reported the incident on October 30, initially stating there was no evidence of unauthorized access, but later updates revealed a more severe situation.
The company's KYT (Know Your Transaction) tool, which helps banks and crypto firms screen transactions for illicit activities, was taken offline on Wednesday. Chainalysis intended to restore access on Thursday, but as of 4 p.m. Eastern time, the service remained under maintenance. The timing of the outage is particularly notable as the crypto industry is dealing with the aftermath of a $6.4 billion theft from Binance, though Chainalysis stated the incidents are unrelated.
Chainalysis has not specified how much data the intruder could access or alter, nor has it confirmed whether the attacker has been removed from its systems. The company assured that there is no evidence of investigation data being accessed or manipulated. However, the exposure of password hashes and live tokens for all users remains a significant concern. Customers will need to provide trusted IP addresses, reset passwords, and replace API keys to regain access to KYT and related products.
The breach highlights the growing threat of AI-driven cyberattacks, as suggested by an initial customer email that mentioned 'offensive agentic techniques.' Chainalysis has over 1,500 customers in 70 countries, including major financial institutions like BNY Mellon, which integrated Chainalysis' compliance suite into its risk management program. The full impact of the breach and the steps taken to mitigate it remain unclear as of Thursday afternoon.