Blockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic cyber attack targeting its systems also exposed names, usernames, password hashes and live tokens for all users.

"While we investigated, we removed access to Reactor and Data Solutions," the company said. "At this time we continue to have no evidence that any investigations data has been accessed or Chainalysis attribution data has been manipulated."

Chainalysis said it has implemented additional proactive monitoring systems to detect unusual activity, adding it took the Know Your Transaction (KYT) user interface and API offline, alongside other address screening products and the login page.

Previously, Chainalysis said it was probing what it described as an "ongoing multi-front cyber attack," leading to the discovery of an "on-path attack" that exposed a subset of customer passwords. The company said the attack vector has since been addressed.

Out of an abundance of caution, Chainalysis has also taken the step of locking the impacted accounts.

"For customers who just received an email from us instructing you to reset your Chainalysis password, resetting this password won't be possible right now," it noted. "We still encourage you, where necessary, to reset your password on other systems where you may be reusing credentials."

The development comes less than a week after Chainalysis said it was the target of a cybersecurity incident in which an external actor leveraged offensive agentic techniques to obtain unauthorized access to its systems and internal tools.

com) or their Chainalysis account team with trusted IP addresses, which will be added to an allowlist.

Source link