Chainalysis has confirmed that a recent attack on its systems and internal tools exposed data for all of its customers, according to BleepingComputer and TechRadar. The haul includes names, usernames, password hashes, and — most dangerously — live tokens, the kind of credentials attackers can use immediately without any cracking.

In response, the blockchain intelligence firm shut down multiple services to contain the attack and forced every user to change their password. Live session or API tokens being exposed typically also requires wholesale revocation, since password resets alone don't invalidate them.

The breach is especially awkward given who Chainalysis is: the company sells blockchain forensics and compliance tooling to exchanges, financial institutions, and government agencies. Its customer list is itself sensitive — exposure of names and credentials tied to those accounts creates follow-on phishing and impersonation risk well beyond the initial intrusion.

Affected users should assume their credentials are burned: rotate passwords, revoke and reissue any API tokens, and watch for targeted phishing that leverages the leaked account details. Chainalysis has not publicly attributed the attack.