Blockchain Firm Chainalysis Reveals Password Hashes and Active Tokens Compromised in Security Breach
Following an initial assessment that suggested only non-sensitive data was compromised, Chainalysis has now revealed that the security incident exposed password hashes and active authentication tokens.
On Wednesday, Chainalysis revealed a more extensive scope of impact resulting from a security breach that the company had previously characterized as affecting only information that was non-sensitive in nature regarding its customers.
"On Monday, we discovered certain customer information including names, usernames, password hashes and live tokens for all Chainalysis users were exposed to a malicious actor," the company specializing in blockchain analytics indicated in a revised version of its security incident notification.
The firm chose not to reveal whether every category of information was compromised for each individual user and turned down Cointelegraph's request for further details beyond what was included in the company's public disclosure statement.
In its original statement on Oct. 30, Chainalysis had reported that the security breach resulted in the exposure of user IDs, names and email addresses, while indicating that there was no evidence suggesting that attackers had gained access to authentication credentials or session tokens.
A separate update released on Wednesday revealed that an "on-path attack" had resulted in the exposure of passwords belonging to certain customers. The company indicated it had successfully contained and addressed that particular attack vector and was proceeding to lock the accounts that were affected and mandate password resets for those users.
Notwithstanding the more extensive scope of the data exposure, Chainalysis maintained that it continued to have no evidence indicating that the attackers had successfully accessed investigation data or had manipulated the company's attribution data in any way.