Chainalysis breach exposes user hashes and live access tokens
This is a DailyCyber.News update, brought to you by BareMetalCyber.com, for Friday, November 6th, 2026.
All Chainalysis users now face credential and session risk after names, usernames, password hashes and live tokens were exposed. The company also reported suspected access to some customer accounts on its transaction-monitoring service. Several products were taken offline while the company investigated and strengthened its defenses.
Chainalysis says it has no evidence that investigations data was accessed or that attribution data was manipulated. The attacker remains unidentified, and the company hasn’t explained what it meant by offensive agentic techniques. Its customers include organizations in law enforcement, finance, cryptocurrency and national security.
For leaders, this incident combines sensitive identity exposure with disruption to business-critical compliance and investigation services. For defenders, users should reset passwords through the direct login page, rotate A P I keys where appropriate and treat live tokens as potentially usable until they’re invalidated. Any reused passwords elsewhere also need attention.
Reset affected credentials, rotate A P I keys, invalidate active sessions and monitor accounts for signs of unauthorized access.
For the sources and the full Daily Cyber newsletter, visit DailyCyber.News.
