Chainalysis spent five days telling customers the breach had not reached their credentials. On Wednesday night it told them it had reached all of them.

The blockchain-analytics firm's latest incident update states that "certain customer information including names, usernames, password hashes and live tokens for all Chainalysis users were exposed to a malicious actor." Every user is affected, and every user will eventually have to reset a password and rotate API keys — just not yet.

That is a long way from 30 October, when Chainalysis published an incident note saying it had found "no evidence of unauthorized access to investigation content, authentication credentials, or session tokens." The data it described as touched at that point was prosaic: user IDs, full names, email addresses, organisation role labels. Its reasoning was that offensive agentic techniques had reached internal systems, but not the keys to them.

Between those two statements the product surface came apart in stages. Reactor and Data Solutions went offline on Monday as a precaution, with compliance transaction-monitoring left running. On Wednesday the company disclosed an "on-path attack" — an attacker intercepting traffic between users and the service — that exposed a subset of customer passwords, said the vector was contained and that affected accounts were being locked. Forty minutes later it reported "abnormal activity" and pulled the Know Your Transaction (KYT) user interface and API, its other address-screening products, and the login page.

The practical consequence is that the remedy is not available. "For customers who just received an email from us instructing you to reset your Chainalysis password, resetting this password won't be possible right now," the company said, directing people to reset credentials they may have reused on other systems. Restoration begins with an allowlist: customers submit trusted IP addresses, then reset passwords and rotate API keys. Reactor, Data Solutions and Chain (Beta) have no announced return date.

This is not an ordinary SaaS outage. Chainalysis sells to more than 1,500 customers across law enforcement, exchanges, regulators and national-security agencies, and KYT is the transaction-monitoring layer compliance teams use to screen flows for money laundering. Its own summary of what survived is narrow: "no evidence that any investigations data has been accessed or Chainalysis attribution data has been manipulated." Investigators' graphs, notes and cases, the company says, are intact.

Several things remain unanswered. Chainalysis has not said how the passwords were hashed, so it is unknown how crackable the hashes are. It has not defined "live tokens," which matters because an active token authenticates without a password. It has not said whether the on-path password interception, the hash and token exposure, and the suspected access to some KYT accounts share an actor or a method. It has not said how many users it has.

The backdrop is an agentic intrusion wave that security vendors have spent a month documenting. Microsoft's threat-intelligence team described actors using ARTEX, an open-source multi-agent penetration-testing framework, to search public GitHub repositories for exposed OAuth secrets and then sign in as service principals across dozens of applications and multiple tenants. The agents targeted exactly the operations that hand back more credentials: storage account keys, App Service settings, connection strings, publishing credentials, Azure Kubernetes Service user credentials and AI-service API keys. In at least one case an agent went from scanning GitHub to exfiltrating secrets from Azure Key Vault in five minutes; Microsoft assesses the activity as ongoing since August 2026.

Google and Mandiant have documented the monetisation layer that makes this worth doing. Underground "LLM mixers" resell access to compromised enterprise model accounts to paying customers, proxying requests so the victim's cloud bill keeps growing while the buyer never registers an account. Wiz traced two stolen enterprise Bedrock keys to roughly 800,000 and 1.7 million model calls, with some victims billed close to a million dollars for inference they never requested. Chainalysis's own incident email said it was responding to an "industry-wide rise in AI-driven cyberattacks," and named Chainstack, OpenCode, Warp and WorkOS among the platforms hit.

For Chainalysis customers the immediate actions are unglamorous: reset any password reused on another service now, since the Chainalysis one cannot be changed, turn on two-factor authentication everywhere it is offered, and treat any password-reset email as suspect until you have typed the login URL yourself. For everyone else the lesson is inventory. The first link in the chain Microsoft described is a secret committed to a public repository — a mistake that costs nothing to make and, with agentic tooling on the other end, minutes to exploit.

Sources