UPDATE: Chainalysis suspends key services and begins phased recovery
CIE News ·
Update to Chainalysis discloses exposure of password hashes and live tokens in breach
Based on on-chain data and security researchers' analysis; not yet confirmed by the affected parties.
Chainalysis has suspended services and started a phased recovery after an internal breach exposed password hashes and active session tokens, though forensic data remains intact.
Chainalysis announced on November 6, 2026, that it has suspended multiple core services and initiated a phased restoration of its infrastructure. As previously reported, the company disclosed that an internal security breach exposed customer names, usernames, password hashes, and active session tokens, broadening the scope beyond initial assessments that only non-sensitive data had been accessed.
The suspended offerings include Chainalysis KYT, Reactor, and Data Solutions services, with access to KYT and Address Screening beginning to return in stages. Chainalysis confirmed that its forensic data and blockchain attribution sets were not compromised during the incident.
Clients must complete remediation procedures following the event. According to Chainalysis, organizations using its platform are required to enforce company-wide password resets, rotate API keys, and submit explicit IP allowlists.
Key facts
- KYT and Reactor suspended
- Phased restoration underway
- Forensic data remains secure
- Mandatory password resets
Read the original at chainalysis.com